--- summary: "Generated inventory and migration priorities for synchronous SQLite access" read_when: - Choosing a database worker migration - Auditing Gateway main-thread SQLite exposure title: "Database worker migration inventory" --- This snapshot contains **624 non-test files and 2436 call expressions** for the five primitives below. The campaign previously reported 404 files; that is a historical estimate, not a fixed target or a count of call expressions. This inventory follows current source and excludes import-only matches, comments, tests, fixtures, and test support. Its scan scope and exclusions are explicit below. Regenerate with `pnpm db:worker-inventory:gen`; verify with `pnpm db:worker-inventory:check`. `node scripts/database-worker-inventory.mjs --json` emits every call's primitive, line, column, lexical operation path, optional variable-initializer binding, enclosing synchronous guards, file owner, tier, and classification evidence. The script uses the repository's TypeScript parser and `rg`; it does not load application code or open a database. ## Scope and interpretation T1 is request/event/timer exposure, including conservatively retained runtime or mixed kernels whose callers still need tracing. T2 is startup, migration, or a named boot/lock exception candidate. T3 is CLI, Doctor, or developer one-shot code. W marks worker implementations separately: their synchronous SQL is intentional and is not outstanding main-thread debt. A filename-based T2/T3/W classification is an audit lead, not a proof that every caller is safe. Do not move a mixed kernel or a module with ‘worker’ in its name to W without tracing its callers. Reviewed mixed modules classify calls by their named lexical operation path, optionally narrowed to a variable initializer or an exact synchronous guard. These qualifiers exclude nested function bodies, and a guard applies only to its then-branch, so unrelated sites remain conservative even when source lines move. Other file tiers retain the broadest applicable counted exposure, including explicit worker/maintenance mixtures. Each file has at most one row per tier; tier file counts overlap, while total files and call expressions are unique. These are not measured runtime call counts. Recheck the operation and all registered callers before changing its classification. Maintenance invoked by Gateway timers remains T1. Prepared results never confer current authority; follow [worker access](/reference/database-schemas/worker-access). Canonical-repair mutations and exact-row readers retain T2 for native Doctor callers; Gateway legacy-main detection compares entries and transcript content in the existing session reader worker. Full generation and node-artifact custody fingerprints remain Doctor-only. Shared cleanup kernels retain T1 where released opaque SDK callbacks or initialization rollback require native transactions. Synchronous lifecycle and final-effect authority checks remain native residuals. Incognito category reads and native approval SDK compatibility retain their existing classifications. Claw provenance's counted writes are CLI-only; its raw Gateway reads remain runtime debt outside the five-primitive scan. Likewise, worker-only direct Cron receipt calls do not classify the host current-authority reads they transitively expose. Reclassification corrects metadata; it does not move runtime SQL or demonstrate a speedup. The scan covers JavaScript/TypeScript files under `src/`, `extensions/`, `packages/`, and `scripts/` as selected by `rg` (respecting ignore rules). It recognizes direct calls, property calls with these names, and named-import aliases. It does not resolve higher-order aliases, dynamic dispatch, transitive wrappers, direct `DatabaseSync` methods, other query primitives, or native-language SQLite. It is a reproducible migration queue, not a complete prohibition checker. Tests are deliberately excluded rather than counted as T3. | Key | Primitive | | --- | ----------------------------------- | | Q | `executeSqliteQuerySync` | | F | `executeSqliteQueryTakeFirstSync` | | S | `runOpenClawStateWriteTransaction` | | A | `runOpenClawAgentWriteTransaction` | | R | `withOpenClawAgentDatabaseReadOnly` | | Tier | Files | Call expressions | | ---- | ----: | ---------------: | | T1 | 247 | 707 | | T2 | 97 | 388 | | T3 | 71 | 253 | | W | 280 | 1088 | ## Profile priority and current cutover status Channel ingress `listPending`, `listClaims`, `listFailed`, `listUnsettled`, and claim/recovery preparation share the write broker's FIFO with mutations. They must observe earlier committed writes and retain read-write database admission. Explicit read-only inspection remains noncreating inside that broker. Failed-health, pressure, and account-discovery diagnostics use the read-only worker, where bounded staleness is acceptable. The 2026-09-20 five-second Gateway profile on build `ddb31b38a88c` attributed **47% of main-thread time in aggregate** to synchronous state write coordination, including profile creation and exec-approval updates. No separate per-site timing was captured for the read paths below. Their order follows the reported profile triage, not invented individual costs. The T1 table puts these known owners first; all other owners follow alphabetically. | Priority | Entry point / owner | Status to verify before a lane | | -------- | --------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | 1 | `ensureProfileForEmail`; `updateExecApprovals` | Exec policy mutations use the shared-state writer; final SDK authority reads and opaque approval-commit kernels retain their native contract. Profile creation is a separate owner. The 47% is shared, not a measurement of either method alone. | | 2 | `sessions.list` → `listProjectedSessions` → resident session row projection | Warm requests already reuse resident rows with no host Kysely reads. Hydration, dirty/archived rows, and membership reads remain migration debt; preserve identity-keyed reuse and projection revisions. | | 3 | `chat.history` → history worker | Ordinary durable pages already use the worker. This cutover moves raw cursor delta reads and JSON parsing through the same owner; display/profile projection, byte budgets, and fresh sharing checks stay on the host. | | 4 | Transcript search → `session-transcript-search.ts` | The async facade moves durable FTS reads through the existing worker lifecycle for the runtime callers: `sessions-read.ts`, `sessions-search-projected.ts`, and `embedded-gateway-stub.ts`. Callers recheck current scope and authorization after awaiting. | | 5 | Task/flow registry | Async read facades already use workers; native mutations and mixed kernels remain. Preserve accepted-write fences and projection publication. | | 6 | Provider catalog → `plugin-model-catalog.ts` | Persisted reads reached from `models-config.ts` and prepared model runtime; keep Doctor imports distinct. | The warm `sessions.list` baseline used 5,000 rows, 50 viewers, and 350 calls: **zero host Kysely reads**, **3.07538 ms CPU per call**, and **3.12680 ms amortized wall time per call**. The original per-request store scan was already gone, so this lane does not claim another warm-list database cutover or speedup. These numbers do not cover projection hydration, dirty-row refresh, archived-row materialization, or membership reads. The history cutover leaves selected/current session entries, pending-input/receipt reads, the retained transcript-session key, and lazy subagent source/run-input visibility reads as native work. Ordinary full pages and raw cursor deltas use the history worker. Bound Claude CLI history now uses its temporary merge index: cold preparation scans bounded source windows, and page/anchor requests project only selected messages. Process-held incognito database custody remains migration work because its database cannot be reopened by a durable path in another isolate. Its CLI-history adapter supplies bounded pages from the existing native owner to a request-scoped, memory-only worker index; ownership checks consume committed in-memory facts without additional native revision queries. A failed durable worker read never selects that local path. Durable session reaction summaries and target-message reads use the admitted history worker; reaction writes use the canonical SQLite worker broker with live transaction and commit admission. Process-held incognito reads and writes retain their sole native owner because their database cannot be reopened by path. The synchronous reaction kernel is shared by those admitted worker and incognito paths; no new broker capability or native fallback is added. Reaction mirroring reads durable source conversation bindings through the history worker, including a final read after account/config preparation and immediately before dispatch; synchronous handoff guards retain live reactor, session, and config checks. The conversation registry remains T1 because other synchronous callers are outside this cutover. Schemas, stored bytes, retention, and update behavior are unchanged. ## Next four independent lanes After the history-delta/search cutovers and the separate profile/exec-approval lane, inspect these owners. Only catalog reads have a profile-listed position here; the other three are source-backed candidates without separate timings. Device pairing already dispatches through workers, with native boot/Doctor migration exceptions. Measure each actual entry point before choosing its migration. | Owner | Concrete caller / boundary | | ---------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Persisted provider catalogs | `prepared-model-runtime.facts.ts` and `prepared-model-runtime.scoped-catalog.ts` call `loadPersistedPluginModelCatalogsReadOnly`; prepare catalog bytes off thread without changing registry generations. | | Operator approval records | `operator-approval-session-events.ts` calls `listPendingOperatorApprovals`; its store also expires/prunes records. Keep fresh resolution and allow-once consumption with the transaction owner. | | Worker environment inventory | `worker-environments/environment-access.ts` and `prepared-pool.ts` call `store.list`; carry inventory revisions back and revalidate placement/credential authority after waits. | | Session membership | `session-row-projection-materialize.ts` calls `listSessionMembers`; prepare membership with row facts and invalidate from the existing sharing/projection revision. | ## Call sites by tier and owner Counts use `Q/F/S/A/R` in that order. Source locations are available in `--json`; the first call line below is a navigation hint. Owner labels are source directory boundaries, not CODEOWNERS assignments. Generic runtime candidates require caller evidence before claiming a main-thread defect or a completed migration. ### T1 | Owner / file | Calls (Q/F/S/A/R) | First line | Exposure evidence | | ----------------------------------------------------------------------------------------------------------------- | ----------------: | ---------: | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **src/infra** · `src/infra/exec-approvals-sqlite.ts` | 1/2/0/0/0 | 57 | Final synchronous pre-spawn/2026.9.8 SDK policy reads; native opaque approval guards retain MCP grant kernels until the next SDK major | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-entry-read.ts` | 2/2/0/0/0 | 179 | Session-entry read kernel; inspect each caller's execution context | | **src/gateway** · `src/gateway/session-row-projection-materialize.ts` | 0/0/0/0/1 | 375 | Session-list row entries and membership; process-held incognito path | | **src/gateway** · `src/gateway/mention-inbox-store.ts` | 3/1/0/0/0 | 52 | Worker-backed bundled callers; deprecated 2026.9.8 synchronous Mention Inbox SDK kernel until next SDK major | | **src/gateway** · `src/gateway/mention-inbox.native.ts` | 0/0/1/0/0 | 28 | Deprecated 2026.9.8 synchronous Mention Inbox SDK transaction; removal at next SDK major | | **src/config/sessions** · `src/config/sessions/session-transcript-search.ts` | 1/1/0/0/2 | 87 | Async durable search uses worker; process-held incognito remains native | | **src/config/sessions** · `src/config/sessions/session-sharing-store.kernel.ts` | 1/1/0/0/0 | 33 | Member-row kernel shared by session readers | | **src/config/sessions** · `src/config/sessions/session-sharing-store.ts` | 0/0/0/0/1 | 31 | Session-list member reads and membership mutations | | **src/acp** · `src/acp/event-ledger.ts` | 1/1/1/0/0 | 264 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/acp** · `src/acp/runtime/session-meta-keys.ts` | 1/2/0/0/0 | 51 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/acp** · `src/acp/runtime/session-meta-write.kernel.ts` | 1/0/0/0/0 | 83 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/acp** · `src/acp/runtime/session-meta-write.native.ts` | 0/0/2/0/0 | 96 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/agents** · `src/agents/agent-lifecycle-registry.ts` | 0/0/1/0/0 | 448 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/agents** · `src/agents/plugin-model-catalog.kernel.ts` | 1/0/0/0/1 | 33 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/agents/auth-profiles** · `src/agents/auth-profiles/shared-store-bootstrap.ts` | 1/1/0/0/0 | 149 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/agents/auth-profiles** · `src/agents/auth-profiles/sqlite-json.ts` | 2/2/0/0/0 | 78 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/agents/auth-profiles** · `src/agents/auth-profiles/sqlite.ts` | 0/0/1/1/0 | 454 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/agents/harness** · `src/agents/harness/context-engine-turn-outbox-store.ts` | 0/0/0/1/0 | 50 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/agents/harness** · `src/agents/harness/context-engine-turn-outbox.ts` | 7/4/0/0/0 | 143 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/agents/harness** · `src/agents/harness/native-hook-relay-store.ts` | 0/0/1/0/0 | 116 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/agents/sandbox** · `src/agents/sandbox/registry.kernel.ts` | 1/0/0/0/0 | 433 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/agents/subagents** · `src/agents/subagents/registry/subagent-registry.store.sqlite.ts` | 3/0/0/0/0 | 108 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/agents/worktrees** · `src/agents/worktrees/registry.ts` | 1/0/1/0/0 | 253 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/agents/worktrees** · `src/agents/worktrees/run-lease-owner.ts` | 2/0/0/0/0 | 41 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/agents/worktrees** · `src/agents/worktrees/run-lease-store.kernel.ts` | 1/0/0/0/0 | 71 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/boards** · `src/boards/sqlite-board-store.kernel.ts` | 9/0/0/0/0 | 138 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/boards** · `src/boards/sqlite-board-store.ts` | 0/0/0/1/2 | 138 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/claws** · `src/claws/provenance-runtime-read.kernel.ts` | 1/0/0/0/0 | 16 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config** · `src/config/io.health-state.kernel.ts` | 3/0/0/0/0 | 44 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config** · `src/config/io.health-state.ts` | 0/0/1/0/0 | 141 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/conversation-registry.ts` | 0/0/0/0/1 | 179 | Reaction bindings use worker; other synchronous registry callers remain | | **src/config/sessions** · `src/config/sessions/goals-operations-read.ts` | 0/0/0/0/1 | 68 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/goals-operations.ts` | 2/2/0/1/0 | 151 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.reset.ts` | 0/0/0/0/1 | 88 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-acp-provenance.ts` | 1/1/0/0/1 | 34 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-active-context.ts` | 4/2/0/0/0 | 68 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-active-events.ts` | 2/3/0/0/0 | 104 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-active-projection.ts` | 0/0/0/0/1 | 29 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-archive-read.ts` | 1/0/0/0/0 | 77 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-archive-store-kernel.ts` | 4/2/0/0/0 | 81 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-archive-transaction.ts` | 0/0/0/1/0 | 20 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-branch-rewrite.ts` | 0/1/0/1/0 | 92 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-compaction.ts` | 0/0/0/2/0 | 115 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-conversation-read.ts` | 1/0/0/0/0 | 119 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-conversation.ts` | 8/0/0/0/0 | 44 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-creation.ts` | 0/0/0/1/0 | 202 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-delete-snapshot.ts` | 0/1/0/0/0 | 42 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-deletion.ts` | 0/0/0/2/0 | 680 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-display-position.ts` | 1/0/0/0/0 | 56 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-entry-availability.ts` | 1/1/0/0/2 | 53 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-entry-cache-projection.ts` | 1/0/0/0/0 | 72 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-entry-cache.ts` | 1/0/0/0/0 | 118 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-entry-identity.ts` | 0/1/0/0/0 | 12 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-entry-inventory.ts` | 1/0/0/0/0 | 101 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-entry-list.read.ts` | 1/0/0/0/1 | 97 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-entry-store.ts` | 8/1/0/0/0 | 142 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-entry.ts` | 0/0/0/1/3 | 126 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-exact-read.ts` | 0/1/0/0/4 | 162 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-history-input-visibility.ts` | 0/1/0/0/0 | 101 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-history-interval.ts` | 3/5/0/0/0 | 173 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-history-projection.ts` | 1/2/0/0/0 | 58 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-history-query.ts` | 1/0/0/0/0 | 264 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-history-recency.ts` | 2/0/0/0/0 | 17 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-history-source.ts` | 1/0/0/0/0 | 143 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-history.ts` | 1/0/0/0/2 | 178 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-initial-entry.ts` | 0/0/0/1/0 | 86 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-involvement.ts` | 0/0/0/1/0 | 26 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-lifecycle-artifacts.ts` | 3/1/0/0/1 | 71 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-lifecycle-state.ts` | 2/1/0/0/0 | 302 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-lifecycle.ts` | 0/0/0/1/1 | 135 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-maintenance-store.ts` | 3/0/0/0/0 | 47 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-maintenance-transaction.ts` | 0/0/0/2/0 | 339 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-maintenance.ts` | 0/0/0/0/1 | 312 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-model-context.ts` | 0/1/0/0/2 | 186 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-node-artifacts.ts` | 25/1/0/0/0 | 130 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-owner.ts` | 1/0/0/1/0 | 72 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-parent-session.ts` | 0/0/0/4/0 | 213 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-participant-projection.ts` | 1/0/0/0/0 | 88 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-participant-read.ts` | 0/0/0/0/1 | 15 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-participants.native.ts` | 2/2/0/1/0 | 66 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-pending-input-receipts.ts` | 1/0/0/0/1 | 32 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-pending-inputs-repair.ts` | 5/0/0/0/0 | 35 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-pending-inputs.ts` | 6/2/0/0/0 | 365 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-projection-read.ts` | 1/0/0/0/0 | 121 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-projection.ts` | 0/0/0/1/0 | 315 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-provenance.ts` | 0/2/0/0/0 | 39 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-raw-delta-read.ts` | 2/0/0/0/0 | 194 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-read.ts` | 2/3/0/0/4 | 151 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-reclamation.ts` | 4/0/0/3/0 | 94 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-replacement-projection.ts` | 0/0/0/1/0 | 400 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-replacement-read.ts` | 1/0/0/0/0 | 34 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-reset-window.ts` | 1/9/0/0/0 | 143 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-suffix-read.ts` | 2/2/0/0/0 | 65 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-anchor.ts` | 0/2/0/0/0 | 61 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-header.ts` | 0/1/0/0/0 | 18 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-incremental-read.ts` | 1/0/0/0/0 | 24 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-message-append.ts` | 0/0/0/0/1 | 135 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-message-rewrite.ts` | 0/1/0/2/0 | 49 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-metadata-read.ts` | 0/2/0/0/0 | 31 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-mirror.ts` | 1/2/0/0/0 | 36 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-parent.ts` | 0/5/0/0/0 | 258 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-reports.kernel.ts` | 0/1/0/0/0 | 143 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-reports.ts` | 0/0/0/1/0 | 251 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-sequences.ts` | 1/1/0/0/0 | 72 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-state.ts` | 9/5/0/0/0 | 112 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-stats.ts` | 3/0/0/0/0 | 108 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-store.ts` | 1/2/0/0/0 | 232 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-suffix-idempotency.ts` | 2/0/0/0/0 | 28 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-suffix-write.ts` | 0/0/0/1/0 | 57 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-suffix.ts` | 8/4/0/0/0 | 76 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-turn.ts` | 0/0/0/1/1 | 150 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-watermark.ts` | 0/0/0/0/1 | 65 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-write-guard.ts` | 0/1/0/0/0 | 67 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-write-snapshot.ts` | 0/0/0/2/0 | 120 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-write.ts` | 0/0/0/7/0 | 145 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-worktree-owner.ts` | 1/0/0/0/0 | 48 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-accessor.transcript-range.ts` | 1/5/0/0/0 | 83 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-canonical-key.ts` | 1/1/0/0/0 | 558 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-canonical-validation.ts` | 0/1/0/0/0 | 41 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-cold-storage-inventory.ts` | 0/2/0/0/0 | 14 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-cold-storage.ts` | 0/0/0/0/1 | 533 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-entry-snapshots.ts` | 2/0/0/0/0 | 111 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-group-categories.read.ts` | 1/0/0/0/0 | 13 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-group-categories.ts` | 0/0/0/1/0 | 86 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-history-eviction-candidates.ts` | 2/0/0/0/0 | 52 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-history-eviction.ts` | 0/0/0/0/1 | 229 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-pending-input-history-reconcile.ts` | 2/0/0/1/0 | 24 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-pending-input-history.kernel.ts` | 2/1/0/0/0 | 44 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-pending-input-history.ts` | 0/0/0/0/1 | 175 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-pending-input-operations.kernel.ts` | 3/0/0/0/0 | 145 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-pending-input-source.kernel.ts` | 0/4/0/0/0 | 24 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-pending-input-store.ts` | 0/0/0/1/0 | 164 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-reaction-store.kernel.ts` | 4/2/0/0/0 | 38 | Durable reads and writes use workers; incognito keeps its native owner | | **src/config/sessions** · `src/config/sessions/session-reaction-store.read.ts` | 1/0/0/0/0 | 53 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-reaction-store.ts` | 0/0/0/1/0 | 118 | Worker-admitted reaction writes; process-held incognito retains native owner | | **src/config/sessions** · `src/config/sessions/session-sharing-store.native.ts` | 2/1/0/2/0 | 88 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-suggestion-store.kernel.ts` | 7/2/0/0/0 | 70 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-suggestion-store.ts` | 0/0/0/4/0 | 64 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-transcript-fts.ts` | 1/0/0/0/0 | 73 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-transcript-index.ts` | 6/3/0/0/0 | 83 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-transcript-match.ts` | 0/0/0/0/1 | 90 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-transcript-projection-rebuild.ts` | 6/6/0/0/0 | 102 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-transcript-projection-writer.ts` | 0/1/0/1/0 | 111 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-transcript-read-fence.ts` | 0/1/0/0/0 | 169 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-transcript-reconcile-memory.ts` | 0/2/0/0/0 | 36 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-transcript-reconcile-readiness.ts` | 0/0/0/0/1 | 111 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/session-transcript-retained-data.ts` | 1/0/0/0/0 | 116 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/targets-read-availability.ts` | 0/0/0/0/1 | 96 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/targets.ts` | 0/0/0/0/2 | 132 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/config/sessions** · `src/config/sessions/transcript-payload.ts` | 0/1/0/0/0 | 102 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/cron** · `src/cron/store/row-codec.ts` | 0/1/0/0/0 | 596 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/gateway** · `src/gateway/github-personal-publication-store.ts` | 2/4/3/0/0 | 91 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/gateway** · `src/gateway/github-publication-coordinator-methods.ts` | 5/0/2/0/0 | 150 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/gateway** · `src/gateway/github-publication-store.ts` | 5/3/4/0/0 | 80 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/gateway** · `src/gateway/github-publication.ts` | 1/1/2/0/0 | 93 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/gateway** · `src/gateway/github-repository-publication-store.ts` | 2/7/7/0/0 | 107 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/gateway** · `src/gateway/github-repository-publication.kernel.ts` | 1/0/0/0/0 | 155 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/gateway** · `src/gateway/operator-approval-placement-grants.read.ts` | 1/0/0/0/0 | 53 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/gateway** · `src/gateway/operator-approval-placement-grants.ts` | 0/0/1/0/0 | 185 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/gateway** · `src/gateway/operator-approval-standing-grants.ts` | 7/1/1/0/0 | 179 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/gateway** · `src/gateway/operator-approval-store.kernel.ts` | 0/0/1/0/0 | 202 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/gateway** · `src/gateway/operator-approval-store.operations.ts` | 0/0/1/0/0 | 55 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/gateway** · `src/gateway/operator-approval-store.rows.ts` | 3/1/0/0/0 | 361 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/gateway** · `src/gateway/operator-approval-store.transitions.ts` | 2/0/2/0/0 | 57 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/gateway** · `src/gateway/progress-card-store.ts` | 0/0/0/1/1 | 137 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/gateway** · `src/gateway/session-group-catalog.kernel.ts` | 1/0/0/0/0 | 33 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/gateway/server-methods** · `src/gateway/server-methods/session-placement-read-projection.ts` | 0/0/0/0/1 | 156 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/gateway/worker-environments** · `src/gateway/worker-environments/placement-move-intent.ts` | 0/1/0/0/0 | 252 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/gateway/worker-environments** · `src/gateway/worker-environments/placement-read-projection.ts` | 1/0/0/0/0 | 132 | placement-store.readCurrentMoveAuthority serves native move-abandon, move-service recovery, and pending-result guards. Retained until native/SDK and foreign-writer revocation is fully owned at the next Plugin SDK major. Other projection operations remain worker-only. | | **src/gateway/worker-environments** · `src/gateway/worker-environments/placement-retirement.ts` | 1/0/0/0/0 | 24 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/gateway/worker-environments** · `src/gateway/worker-environments/placement-row-codec.ts` | 1/1/0/0/0 | 176 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/gateway/worker-environments** · `src/gateway/worker-environments/placement-store.ts` | 1/0/1/0/0 | 83 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/gateway/worker-environments** · `src/gateway/worker-environments/placement-workspace-reservation.kernel.ts` | 0/1/0/0/0 | 28 | Native workspace reservation preparation and final publication guard share one current query. Native/SDK and foreign writers prevent cached authority; retirement requires complete revocation publications and foreign-writer custody at the next Plugin SDK major. | | **src/gateway/worker-environments** · `src/gateway/worker-environments/placement-workspace-result.ts` | 4/0/0/0/0 | 99 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/hooks** · `src/hooks/install-record-transaction.ts` | 0/0/2/0/0 | 23 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/gateway-boot-lifecycle.kernel.ts` | 0/1/0/0/0 | 85 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/heartbeat-outcome-store.kernel.ts` | 3/1/0/0/0 | 20 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/heartbeat-outcome-store.ts` | 0/0/0/1/0 | 222 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/message-tool-run-outcome-store.kernel.ts` | 2/0/0/0/0 | 18 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/message-tool-run-outcome-store.ts` | 0/0/0/1/0 | 103 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/push-web-store.kernel.ts` | 3/1/2/0/0 | 64 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/restart-handoff.ts` | 0/1/0/0/0 | 233 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/restart-sentinel-store.ts` | 1/1/0/0/0 | 254 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/session-cost-usage-cache-read.ts` | 0/0/0/0/1 | 16 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/session-cost-usage-cache.kernel.ts` | 10/0/0/0/0 | 41 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/session-cost-usage-cache.sqlite.ts` | 0/0/0/1/0 | 91 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/sqlite-audit-record-store.ts` | 0/0/1/0/0 | 26 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/sqlite-audit-record.kernel.ts` | 1/1/0/0/0 | 110 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/sqlite-staging-token.ts` | 0/1/0/0/0 | 68 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/update-managed-service-handoff-database.ts` | 1/1/0/0/0 | 163 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/update-managed-service-handoff-lease.ts` | 1/0/0/0/0 | 269 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/update-managed-service-handoff-mutation.ts` | 1/0/0/0/0 | 74 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/update-managed-service-handoff-original-owner.ts` | 1/0/0/0/0 | 82 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/update-managed-service-handoff-reclamation.ts` | 1/0/0/0/0 | 120 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/update-managed-service-handoff-rows.ts` | 4/0/0/0/0 | 104 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/update-managed-service-handoff-source-inspection.ts` | 0/2/0/0/0 | 7 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/update-run-admission.ts` | 0/0/1/0/0 | 71 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/update-run-ledger.ts` | 1/0/0/0/0 | 166 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/update-run-read.kernel.ts` | 1/2/0/0/0 | 61 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/update-run-recovery-store.ts` | 1/0/0/0/0 | 21 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra** · `src/infra/update-run-write.ts` | 1/0/0/0/0 | 128 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/infra/outbound** · `src/infra/outbound/current-conversation-bindings.ts` | 1/0/4/0/0 | 98 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/node-host** · `src/node-host/config.ts` | 1/1/1/0/0 | 239 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/node-host** · `src/node-host/node-worker-prepared-workspace-store.kernel.ts` | 1/0/0/0/0 | 70 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/pairing** · `src/pairing/pairing-store-sqlite.ts` | 1/0/0/0/0 | 75 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/plugin-state** · `src/plugin-state/plugin-state-store.database.ts` | 0/0/1/0/0 | 127 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/plugin-state** · `src/plugin-state/plugin-state-store.kernel.ts` | 2/0/0/0/0 | 288 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/plugin-state** · `src/plugin-state/plugin-state-store.mutations.ts` | 1/0/0/0/0 | 85 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/plugin-state** · `src/plugin-state/plugin-state-store.reads.ts` | 1/0/0/0/0 | 24 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/plugin-state** · `src/plugin-state/plugin-state-store.retention.ts` | 1/0/0/0/0 | 133 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/plugins** · `src/plugins/installed-plugin-index-row.ts` | 1/0/0/0/0 | 46 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/proxy-capture** · `src/proxy-capture/store-readonly.ts` | 1/1/0/0/0 | 178 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/proxy-capture** · `src/proxy-capture/store.sqlite.ts` | 0/0/1/0/0 | 206 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/secrets** · `src/secrets/store/secret-store-hidden-github.ts` | 3/2/2/0/0 | 69 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/secrets** · `src/secrets/store/secret-store.ts` | 1/1/1/0/0 | 161 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/session-cards** · `src/session-cards/progress-card-store.ts` | 2/2/0/0/0 | 25 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/sessions** · `src/sessions/session-state-events.ts` | 1/0/0/0/0 | 394 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/sessions** · `src/sessions/session-upstream-links.kernel.ts` | 2/1/0/0/0 | 128 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/sessions** · `src/sessions/session-upstream-links.ts` | 0/0/2/0/0 | 36 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/skills/library** · `src/skills/library/selection-read.kernel.ts` | 1/0/0/0/0 | 45 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/skills/workshop** · `src/skills/workshop/changes.kernel.ts` | 3/0/0/0/0 | 58 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/skills/workshop** · `src/skills/workshop/skill-usage.kernel.ts` | 2/0/0/0/0 | 26 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/state** · `src/state/agent-deletion-final-guard.ts` | 0/4/0/0/0 | 86 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/state** · `src/state/agent-deletion-journal-history.ts` | 0/2/0/0/0 | 20 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/state** · `src/state/agent-deletion-journal.read.ts` | 1/0/0/0/0 | 127 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/state** · `src/state/agent-deletion-journal.ts` | 1/0/0/0/0 | 108 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/state** · `src/state/agent-lifecycle-read.kernel.ts` | 0/1/0/0/0 | 51 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/state** · `src/state/claw-mcp-adoption.ts` | 1/0/1/0/0 | 20 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/state** · `src/state/claw-package-adoption.ts` | 1/0/1/0/0 | 29 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/state** · `src/state/config-machine-state-write.ts` | 2/1/2/0/0 | 31 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/state** · `src/state/config-machine-state.ts` | 0/1/0/0/0 | 62 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/state** · `src/state/github-publication-session-lifecycles.ts` | 1/1/0/0/0 | 40 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/state** · `src/state/openclaw-agent-canonical-validation-receipt.ts` | 1/1/0/0/0 | 53 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/state** · `src/state/openclaw-agent-db-metadata-write.ts` | 1/0/0/0/0 | 20 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/state** · `src/state/openclaw-agent-db-registry.read.ts` | 1/1/0/0/0 | 30 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/state** · `src/state/openclaw-agent-db-registry.ts` | 3/0/2/0/0 | 54 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/state** · `src/state/openclaw-quarantine-store.ts` | 5/2/0/0/0 | 102 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/state** · `src/state/openclaw-state-db-maintenance.ts` | 1/0/0/0/0 | 464 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/state** · `src/state/openclaw-state-db.ts` | 0/0/1/0/0 | 417 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/state** · `src/state/user-github-connections.ts` | 1/0/3/0/0 | 188 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/state** · `src/state/user-model-accounts.ts` | 2/1/3/0/0 | 108 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/state** · `src/state/user-profile-github-identity.ts` | 1/0/0/0/0 | 107 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/state** · `src/state/user-profile-identity.read.ts` | 3/0/0/0/0 | 258 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/state** · `src/state/user-profile-mutation.ts` | 0/0/1/0/0 | 45 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/state** · `src/state/user-profiles-internal.ts` | 2/1/0/0/0 | 102 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/trajectory** · `src/trajectory/runtime-retention.sqlite.ts` | 2/1/0/0/0 | 95 | Runtime/mixed candidate; main-thread reachability needs tracing | | **src/trajectory** · `src/trajectory/runtime-store.sqlite.ts` | 3/0/0/1/1 | 95 | Runtime/mixed candidate; main-thread reachability needs tracing | ### T2 | Owner / file | Calls (Q/F/S/A/R) | First line | Exposure evidence | | ------------------------------------------------------------------------------------------------ | ----------------: | ---------: | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | **extensions/codex** · `extensions/codex/src/migration/native-task-assignments.ts` | 6/0/0/0/0 | 132 | Schema/startup/migration candidate; verify no runtime caller | | **src/acp** · `src/acp/runtime/session-meta-migration-embedded.ts` | 0/1/1/0/1 | 102 | Schema/startup/migration candidate; verify no runtime caller | | **src/acp** · `src/acp/runtime/session-meta-migration-keys.ts` | 1/0/0/0/0 | 112 | Schema/startup/migration candidate; verify no runtime caller | | **src/acp** · `src/acp/runtime/session-meta-startup.ts` | 0/0/0/0/1 | 154 | Schema/startup/migration candidate; verify no runtime caller | | **src/acp** · `src/acp/runtime/session-meta.ts` | 0/0/1/0/0 | 91 | The native writer is retained only by src/infra/state-migrations.acp-session-metadata.ts and test fixtures. Gateway reset rebinding uses session-meta-reset.ts -> commitAcpSessionMutation in the shared-state worker; synchronous SDK readers retain their separate native classification. | | **src/agents** · `src/agents/plugin-model-catalog.kernel.ts` | 4/0/0/0/0 | 77 | Native replacement is Doctor import only: src/commands/doctor-plugin-model-catalog.ts:103 -> plugin-model-catalog.ts:495,517 -> :162. The other caller is plugin-model-catalog.worker.ts:94; readPluginModelCatalogEntries remains T1. | | **src/agents** · `src/agents/plugin-model-catalog.ts` | 3/0/0/3/0 | 111 | Only doctor-plugin-model-catalog.ts:103,126 reaches repair/import/receipt retirement; runtime replacement dispatches at plugin-model-catalog.ts:584; ModelRegistry synchronous kernel reads stay T1 | | **src/agents** · `src/agents/workspace-alias-rebind.ts` | 5/4/1/0/0 | 86 | Only src/commands/doctor-workspace-alias.ts:67,107,131 invokes detect/rebind; readWorkspaceMoveState is private at :166,282. Doctor health/lint reaches detection via src/flows/doctor-health-contributions-final.ts:269 and doctor-health-contribution-runners.workspace.ts:77; repair is installed by src/commands/doctor-config-flow.ts:83,93. | | **src/agents** · `src/agents/workspace-state-store.kernel.ts` | 3/2/0/0/0 | 114 | Workspace worker/read dispatch plus Doctor alias rebind, workspace setup migration, and relocation retirement; native identity resolution remains only with those maintenance callers | | **src/agents/worktrees** · `src/agents/worktrees/registry.ts` | 2/0/1/0/0 | 74 | Only migration discovery src/infra/state-migrations.doctor-discovery.ts:84 and Doctor repair src/config/sessions/worktree-workspace-migration.ts:116 call the list; the latter requires doctor-fix mode. The private runRegistryMigration transaction is called only by discardLegacyRegistryWorktrees and rewriteRegistryWorktreePathsForMigration; their sole production caller is the managed-worktrees step at src/infra/state-migrations.doctor.ts:1256,1258 (Doctor/startup). It acquires the existing schema-maintenance owner before opening the transaction database. | | **src/channels** · `src/channels/message/ingress-queue.migration.ts` | 1/1/2/0/0 | 116 | Schema/startup/migration candidate; verify no runtime caller | | **src/config/sessions** · `src/config/sessions/legacy-main-session-key-scan.ts` | 1/0/0/0/1 | 71 | legacy-main-session-migration.ts calls full native claims only after detect mode returns; detection uses prepareComparisonClaimsFromStores and session-retirement-read.worker.ts | | **src/config/sessions** · `src/config/sessions/legacy-main-session-migration-claims.ts` | 1/0/0/0/2 | 163 | Schema/startup/migration candidate; verify no runtime caller | | **src/config/sessions** · `src/config/sessions/legacy-main-session-migration-operations.ts` | 0/0/0/0/2 | 362 | Schema/startup/migration candidate; verify no runtime caller | | **src/config/sessions** · `src/config/sessions/legacy-main-session-migration.ts` | 2/0/1/0/0 | 266 | Schema/startup/migration candidate; verify no runtime caller | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-canonical-repair.ts` | 7/3/0/1/0 | 54 | Doctor canonical-key repair/import and worker-only legacy comparison in session-retirement-read.worker.ts; native full claims run only after detect returns, and allowCanonicalRepair is supplied only by Doctor canonical-key repair | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-delivery-repair.ts` | 10/4/0/0/0 | 32 | Copy extracted from the reviewed copySqliteSessionOwnedStateForRepair operation in canonical-repair.ts; its other caller is Doctor-only copySessionClaimForRepair. Inventory is called only by doctor-relative-session-store-preservation.ts for offline pre-copy verification and completion fingerprints. No Gateway runtime caller. | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-generation-copy.ts` | 6/2/0/0/0 | 36 | Comparison reads run in session-retirement-read.worker.ts; full claims and generation copies are Doctor legacy/canonical repair. Native deletion-plan generation reads require expectedGenerations, supplied only by legacy-main-session-migration-operations.ts | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-import.ts` | 0/2/0/1/0 | 102 | Legacy session migration: commands/doctor-session-sqlite-import.ts:84 and doctor-session-sqlite-active.ts:73; Doctor retained recovery at doctor-session-sqlite-retained.ts:197 -> infra/deferred-plugin-session-sources.ts:541,590 -> deferred-plugin-session-verification.ts:92 -> deferred-plugin-session-empty.ts:78. | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-node-artifacts.ts` | 1/1/0/0/0 | 103 | Member cleanup is Doctor canonical repair. Full readClaim is Doctor-only; deletion-plan fingerprint reads require expectedNodeArtifactFingerprint, supplied only by Doctor deleteExpectedClaim. Worker detection omits artifact custody; other native artifact kernels remain separately classified | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-pending-inputs-repair.ts` | 0/1/0/0/0 | 146 | node-artifacts.ts:151 is shared, but entry-store.ts:372 runtime alias moves pass the same database and return at pending-inputs-repair.ts:130. The existing initializer is cross-database Doctor repair only, via canonical-repair.ts:514,521 and legacy-main-session-migration-operations.ts:343. | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-state.ts` | 1/0/0/0/0 | 377 | Only the unadmitted legacy UPDATE is guarded here. createMigrationDatabaseHandle in state-migrations.agent-database.ts supplies raw media/directive migration handles. Durable and incognito runtime openers register identity before exposure; their RETURNING executor remains T1. | | **src/config/sessions** · `src/config/sessions/session-canonical-key-read.ts` | 0/2/0/0/1 | 21 | Only startup-migration.ts:287 calls it, through gateway/server-startup-session-migration.ts:201 and server-startup-plugins.ts:99 or deferred boot admission at server-agent-database-startup.ts:112. | | **src/config/sessions** · `src/config/sessions/session-canonical-key.ts` | 1/1/0/0/0 | 608 | Only startup-migration.ts:291 boot admission and commands/doctor-session-canonical-keys.ts:438,518 repair call this setter; other canonical-key runtime operations stay T1. | | **src/config/sessions** · `src/config/sessions/session-claim-repair-copy.ts` | 6/0/0/1/1 | 71 | Extracted from legacy-main-session-migration-operations.ts:copyClaimCrossStore. Its only callers are processIdenticalClaims after doctor-fix admission and doctor-relative-session-store.ts under exclusive Doctor maintenance; detect mode returns before copying. Source claims are rechecked inside the destination write transaction. | | **src/config/sessions** · `src/config/sessions/worktree-workspace-migration.ts` | 1/0/0/0/1 | 71 | Schema/startup/migration candidate; verify no runtime caller | | **src/gateway** · `src/gateway/config-revision-token.ts` | 1/2/1/0/0 | 58 | Gateway construction at server-kernel-request-runtime.ts:48; local-request-context.ts:107 also initializes it via agents/agent-command-local.ts:61 for standalone commands/boot. Existing Gateway scopes return before local allocation at local-request-context.ts:237. Request hashing captures the key and performs no SQL. | | **src/gateway** · `src/gateway/github-personal-publication-store.ts` | 1/0/1/0/0 | 235 | Only github-publication-runtime.ts:18 during construction by server-worker-placement-startup.ts:90, reached from server-runtime-state-prepare.ts:181. Periodic reconcilePublications never calls the fence. | | **src/gateway** · `src/gateway/operator-approval-store.transitions.ts` | 3/0/2/0/0 | 281 | Boot calls only in server-aux-handlers.ts:105,109; remaining transitions retain native SDK compatibility | | **src/gateway/worker-environments** · `src/gateway/worker-environments/placement-turn-claims.ts` | 2/0/0/0/0 | 345 | Only server-worker-environment-startup.ts:177 clears restart claims | | **src/gateway/worker-environments** · `src/gateway/worker-environments/store-schema.ts` | 0/0/1/0/0 | 26 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/deferred-plugin-migrations.ts` | 2/0/2/0/0 | 73 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/deferred-plugin-session-sources.ts` | 2/0/2/0/0 | 581 | Doctor retained-source recovery/import: src/commands/doctor-session-sqlite-retained.ts:197 and doctor-session-sqlite.ts:376,1039. | | **src/infra** · `src/infra/delivery-queue-sqlite-bound.ts` | 2/0/0/0/0 | 138 | Native migration: src/infra/outbound/delivery-queue-migration.ts:308; schema backfill: src/state/openclaw-state-db-delivery-queue-backfill.ts:93. Other terminalization/pruning callers are delivery-queue.worker.ts:117,316,387,457 and session-delivery-queue.worker.ts:264. | | **src/infra** · `src/infra/delivery-queue-sqlite-namespace.kernel.ts` | 0/1/0/0/0 | 121 | Native replace/move: src/infra/delivery-queue-sqlite-namespace.ts:34,49 → outbound/delivery-queue-migration.ts:169,205,235,289,349,367,435. Other callers are enqueue/delivery workers. | | **src/infra** · `src/infra/delivery-queue-sqlite-namespace.ts` | 0/0/2/0/0 | 26 | Sole native callers src/infra/outbound/delivery-queue-migration.ts:169,205,235,289,349,367,435; Doctor entry src/commands/doctor-outbound-delivery.ts:137,162. | | **src/infra** · `src/infra/delivery-queue-sqlite.kernel.ts` | 4/0/0/0/0 | 168 | Native loads/deletes/count and receipt ownership serve Doctor migration via commands/doctor-outbound-delivery.ts and infra/outbound/delivery-queue-migration.ts. Post-ready recovery count and cron receipt selection use delivery-queue.worker.ts; test-only status inspection lives in test support. Initial post-ready recovery is not boot admission. | | **src/infra** · `src/infra/device-identity-store.ts` | 4/2/2/0/0 | 234 | Live callers use device-identity-async.ts through openclaw-state.worker.ts. Native callers are startup-local-cli-pairing.ts (server-runtime-state-prepare boot), node-host/runner.ts and startup-state-readiness.ts (node boot/connect CLI), config-preflight-snapshot.ts, doctor-device-pairing.ts, heartbeat-schedule.ts (Doctor cadence migration only), and state-migrations.device-identity*.ts (Doctor).; src/infra/state-migrations.device-identity.ts:475 enforces doctorOnlyStateMigrations, then :494 → state-migrations.device-identity-repair.ts:64. | | **src/infra** · `src/infra/device-pairing-node-desktop-migration.ts` | 0/1/1/0/0 | 76 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/device-pairing-store.ts` | 18/5/5/0/0 | 113 | Runtime uses device-pairing-core.worker.ts and state-read; native snapshots only in device/node-pairing-migration.ts and startup desktop-node migration | | **src/infra** · `src/infra/exec-approvals-store.ts` | 0/0/1/0/0 | 204 | Only exec-approvals-generated-migration.ts uses the synchronous update adapter in production; runtime edits, removal and restoration dispatch to the writer. | | **src/infra** · `src/infra/gateway-boot-lifecycle.kernel.ts` | 0/1/0/0/0 | 54 | Extracted from the existing gateway-boot-lifecycle.ts boot exception. Native inspectGatewayCrashLoopBreaker is only called by cli/gateway-cli/run.ts beginBoot before starting the Gateway; runtime inspection and recovery commit revalidation execute via gatewayBootReadOperations and gateway-boot-lifecycle.worker.ts in the existing state workers. | | **src/infra** · `src/infra/gateway-boot-lifecycle.ts` | 4/2/3/0/0 | 93 | Boot or lock/lease primitive; exception is operation-scoped | | **src/infra** · `src/infra/session-cost-usage-cache-migration.ts` | 3/0/0/0/0 | 55 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/session-sqlite-migration-readers.ts` | 1/0/0/0/0 | 415 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/session-sqlite-transcript-verification.ts` | 0/1/0/0/1 | 46 | Doctor readers/import verification: src/commands/doctor-session-sqlite-missing-index.ts:80, doctor-session-sqlite-active.ts:60, doctor-session-sqlite-import.ts:302, doctor-session-sqlite-verification.ts:303; retained recovery doctor-session-sqlite-retained.ts:197. | | **src/infra** · `src/infra/sqlite-audit-record-store.ts` | 0/0/2/0/0 | 30 | Legacy migration only: src/infra/state-migrations.audit-recovery.ts:561 and state-migrations.audit-logs.ts:435,470,561; Doctor steps state-migrations.doctor.ts:1436,1457. | | **src/infra** · `src/infra/sqlite-audit-record.kernel.ts` | 3/0/0/0/0 | 221 | Native entries/upsert serve state-migrations.audit-checkpoints.ts, audit-recovery.ts, audit-logs.ts and CLI audit-backup.ts. Native latest serves readRecentConfigAuditRecords in Doctor config flow and update-immutable-protection.ts. Transcript/greeting reads and CAS, plus config-journal snapshots, use the existing workers. Native config observation still reaches register/count/next/prune, which remain T1. | | **src/infra** · `src/infra/sqlite-schema-header.ts` | 0/1/0/0/0 | 26 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/startup-migration-checkpoint.ts` | 1/1/0/0/0 | 123 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.acp-session-metadata.ts` | 0/0/1/0/0 | 40 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.apns.ts` | 1/3/1/0/0 | 184 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.commitments.ts` | 0/0/1/0/0 | 111 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.debug-proxy.ts` | 0/0/1/0/0 | 371 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.deferred-session-import.ts` | 1/0/1/0/0 | 48 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.device-auth.ts` | 1/2/1/0/0 | 107 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.device-identity.ts` | 2/1/1/0/0 | 130 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.exec-approvals-canonical.ts` | 0/1/1/0/0 | 19 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.exec-approvals.ts` | 0/0/1/0/0 | 154 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.managed-outgoing-images.ts` | 2/1/2/0/0 | 313 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.media-persistence-database.ts` | 3/0/0/0/0 | 59 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.media-persistence.ts` | 1/0/0/0/0 | 291 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.meeting-transcripts-insert.ts` | 3/0/1/0/0 | 31 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.meeting-transcripts-verify.ts` | 1/0/0/0/0 | 34 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.meeting-transcripts.ts` | 8/2/3/0/0 | 61 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.node-host.ts` | 1/1/1/0/0 | 225 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.plugin-doctor-context.ts` | 2/0/0/0/0 | 343 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.receipts.ts` | 3/1/1/0/0 | 69 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.runtime-state.ts` | 3/0/1/0/0 | 124 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.session-window-repair.ts` | 1/1/0/0/0 | 71 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.shared-auth-store.ts` | 10/1/2/2/0 | 99 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.transcript-archive-publication.ts` | 3/2/0/0/0 | 91 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.transcript-directives-archives.ts` | 4/3/0/0/0 | 170 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.transcript-directives.ts` | 3/1/0/0/0 | 110 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.tui-last-session.ts` | 1/2/1/0/0 | 158 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.web-push.ts` | 2/3/1/0/0 | 157 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.workspace-setup-receipts.ts` | 2/1/0/0/0 | 110 | Schema/startup/migration candidate; verify no runtime caller | | **src/infra** · `src/infra/state-migrations.workspace-setup-store.ts` | 7/4/1/0/0 | 157 | Schema/startup/migration candidate; verify no runtime caller | | **src/pairing** · `src/pairing/pairing-store-sqlite.ts` | 6/0/1/0/0 | 134 | Runtime mutations execute in pairing-store.worker.ts through the shared-state writer registry. Native snapshots remain only in state-migrations.channel-pairing.ts for Doctor. The released synchronous SDK reader calls readChannelAllowEntries only; its shared allowlist query remains T1. | | **src/plugin-state** · `src/plugin-state/plugin-state-store.kernel.ts` | 1/0/0/0/0 | 269 | Native raw-row inspection only: src/infra/state-migrations.plugin-doctor-context.ts:416 -> plugin-state-store.sqlite.ts:394. Other callers are plugin-state.worker.ts:104 -> plugin-state-store.reads.ts:111 and plugin-state.worker.ts:173 -> plugin-state-store.journal.ts:122; public key-range facade is asynchronous at plugin-state-store.ts:580. | | **src/plugin-state** · `src/plugin-state/plugin-state-store.retention.ts` | 0/1/0/0/0 | 69 | Only migration/Doctor batch creates retention: src/infra/state-migrations.plugin-doctor-context.ts:409 -> plugin-state-store.ts:597 -> plugin-state-store.sqlite.ts:133,139. The conditional retention refresh at plugin-state-store.retention.ts:228 shares that batch; native ordinary registration (:107) and worker registration (plugin-state.worker.ts:190) omit retention. | | **src/plugin-state** · `src/plugin-state/plugin-state-store.sqlite.ts` | 1/0/0/0/0 | 358 | Only src/infra/state-migrations.plugin-doctor-context.ts:466 calls exact-row deletion, after repair-authority validation at :464. Context creation is limited to state-migrations.plugin-doctor.ts:200,325; no runtime keyed-store method exposes this repair operation. | | **src/state** · `src/state/agent-deletion-journal.ts` | 0/0/1/0/0 | 137 | Pre-open registration/schema/lease admission at openclaw-agent-db-registry.ts:79, schema.ts:519 and lease.ts:161,495,699; runtime journal mutation/fence reads stay T1 | | **src/state** · `src/state/config-machine-state-write.ts` | 1/1/1/0/0 | 169 | Only migrations src/infra/state-migrations.config-machine-state.ts:71 and state-migrations.update-check.ts:66; Doctor roots doctor-config-preflight.cron.ts:27 and state-migrations.doctor.ts:910,1394. | | **src/state** · `src/state/openclaw-agent-db-lease.ts` | 9/3/7/0/0 | 173 | Boot or lock/lease primitive; exception is operation-scoped | | **src/state** · `src/state/openclaw-agent-db-schema.ts` | 0/0/1/0/0 | 645 | Schema/startup/migration candidate; verify no runtime caller | | **src/state** · `src/state/openclaw-agent-session-snapshots-migration.ts` | 1/0/0/0/0 | 75 | Schema/startup/migration candidate; verify no runtime caller | | **src/state** · `src/state/openclaw-state-db-existing-schema.ts` | 0/1/0/0/0 | 41 | Schema/startup/migration candidate; verify no runtime caller | | **src/state** · `src/state/openclaw-state-db-session-watch-migration.ts` | 3/2/0/0/0 | 37 | Schema/startup/migration candidate; verify no runtime caller | | **src/state** · `src/state/openclaw-state-db.ts` | 0/0/1/0/0 | 214 | Startup checkpoint callers only: startup-migration-checkpoint.ts:84,157 serves CLI startup-config-preflight.ts admission/heartbeat/release; gateway-owner-lease.ts:253,282 claims/releases the process lock, whose runtime heartbeat already uses openclaw-state-lease-heartbeat.ts. Other shared-state writes remain T1. | | **src/state** · `src/state/openclaw-state-feature-schema.ts` | 0/0/1/0/0 | 35 | Schema/startup/migration candidate; verify no runtime caller | | **src/state** · `src/state/openclaw-state-lease-storage.ts` | 0/0/1/0/0 | 86 | Boot or lock/lease primitive; exception is operation-scoped | | **src/state** · `src/state/openclaw-state-lease-store.ts` | 5/2/0/0/0 | 27 | Boot or lock/lease primitive; exception is operation-scoped | | **src/state** · `src/state/openclaw-state-schema-publication.ts` | 2/0/0/0/0 | 36 | Schema/startup/migration candidate; verify no runtime caller | | **src/state** · `src/state/user-profiles-owner-migration.ts` | 3/0/1/0/0 | 46 | Schema/startup/migration candidate; verify no runtime caller | | **src/state** · `src/state/user-profiles-schema.ts` | 2/0/1/0/0 | 140 | Schema/startup/migration candidate; verify no runtime caller | | **src/state** · `src/state/user-profiles-tailscale-migration.ts` | 3/1/1/0/0 | 37 | Schema/startup/migration candidate; verify no runtime caller | ### T3 | Owner / file | Calls (Q/F/S/A/R) | First line | Exposure evidence | | ----------------------------------------------------------------------------------------------- | ----------------: | ---------: | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **extensions/memory-core** · `extensions/memory-core/src/memory/manager-status-state.ts` | 1/0/0/0/0 | 36 | Only manager.ts:546 calls the storage query, gated by sourceInspections populated through inspectSources at manager.ts:182. Explicit diagnostic callers are cli-status.runtime.ts:218, cli-index-search.runtime.ts:73,214, and src/commands/status.scan.shared.ts:474; ordinary Gateway status does not request inspection. | | **scripts/bench-agent-concurrency-worker.ts** · `scripts/bench-agent-concurrency-worker.ts` | 1/0/0/0/0 | 190 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **scripts/bench-agent-database-holds.ts** · `scripts/bench-agent-database-holds.ts` | 0/0/0/1/0 | 115 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **scripts/crabbox-source-mirror.mts** · `scripts/crabbox-source-mirror.mts` | 5/0/0/0/0 | 112 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **scripts/lib** · `scripts/lib/code-mode-matrix-usage.ts` | 4/0/0/0/0 | 135 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/acp** · `src/acp/runtime/session-meta-doctor.ts` | 3/0/2/0/2 | 247 | Doctor repair: src/commands/doctor-session-transcripts.ts:318. Plugin Doctor context: src/infra/state-migrations.plugin-doctor-context.ts:403,463, constructed by state-migrations.plugin-doctor.ts:200,325. | | **src/agents/harness** · `src/agents/harness/native-hook-relay-bridge-query.ts` | 0/1/0/0/0 | 9 | Native Node one-shot CLI: src/cli/native-hook-relay-cli.ts:98 -> native-hook-relay-client.ts:39 -> native-hook-relay-client-store.ts:20 -> native-hook-relay-client-read.ts:22. Gateway reads/mutations use native-hook-relay-store.worker.ts:11,35,44,53 through store.kernel.ts:48; Bun CLI uses its client worker. | | **src/agents/worktrees** · `src/agents/worktrees/registry.ts` | 2/0/0/0/0 | 89 | Legacy list is only src/infra/state-migrations.doctor-discovery.ts:52 under doctorOnlyStateMigrations === true (:51); discard is only state-migrations.doctor.ts:1360 under isDoctor (:1359). Ordinary runtime worktree readers and mutations remain T1. | | **src/claws** · `src/claws/cron.ts` | 4/0/4/0/0 | 131 | CLI add/update/remove only: src/cli/claws-cli.ts:115,152,181 → add.ts:585, update-apply.ts:541 and lifecycle-state.ts:555,557 → cron.ts/cron-update.ts. | | **src/claws** · `src/claws/mcp.ts` | 4/0/4/0/0 | 103 | CLI add/update/remove only: src/cli/claws-cli.ts:115,152,181 → add.ts:568,570, update-apply.ts:410 and lifecycle-state.ts:506 → mcp.ts/mcp-update.ts/lifecycle-mcp-removal.ts. | | **src/claws** · `src/claws/package-status.kernel.ts` | 1/0/0/0/0 | 15 | CLI add: src/claws/add.ts:264 → packages.ts:316,395,567,579,656 → provenance.ts:488; worker sibling provenance-write.worker.ts:81. | | **src/claws** · `src/claws/package-update-provenance.ts` | 2/1/1/0/0 | 48 | CLI update: src/cli/claws-update-cli.runtime.ts:175 → src/claws/update-apply.ts:300,322 → package-update.ts:59,98,99,182,183,228,234,254. | | **src/claws** · `src/claws/provenance-adopted.ts` | 4/2/2/0/0 | 41 | Only claws migrate/remove CLI one-shots call these writers via migrate.ts and lifecycle-adopted-removal.ts; no Gateway caller | | **src/claws** · `src/claws/provenance.ts` | 6/0/6/0/0 | 117 | CLI add/update/remove writers; Gateway claws-packages.ts:124 injects worker claimPackageRef; raw Gateway reads remain outside this primitive census | | **src/claws** · `src/claws/workspace.ts` | 4/1/5/0/0 | 154 | CLI add: src/claws/add.ts:509,511 → workspace.ts:376,408,417,419,427,432; CLI update: update-apply.ts:398 → workspace-update.ts:115,121,171,173,177. | | **src/commands** · `src/commands/doctor-agent-database-paths.ts` | 0/0/1/0/0 | 15 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/commands** · `src/commands/doctor-agent-deletion-journal-quarantine.ts` | 3/0/1/0/0 | 46 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/commands** · `src/commands/doctor-agent-deletion-journal-restore.ts` | 0/2/1/0/0 | 32 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/commands** · `src/commands/doctor-auth-migration-receipts.ts` | 3/2/2/0/0 | 95 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/commands** · `src/commands/doctor-heartbeat-task-migration.ts` | 2/0/1/0/0 | 252 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/commands** · `src/commands/doctor-relative-session-store-preservation.ts` | 0/2/0/0/0 | 20 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/commands** · `src/commands/doctor-relative-session-store.ts` | 1/0/0/0/1 | 173 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/commands** · `src/commands/doctor-session-incognito-key-repair-state.ts` | 10/1/0/0/0 | 32 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/commands** · `src/commands/doctor-session-incognito-key-repair.ts` | 4/0/3/1/1 | 77 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/commands** · `src/commands/doctor-session-sqlite-retained.ts` | 0/0/1/0/0 | 102 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/commands** · `src/commands/doctor-session-sqlite-verification.ts` | 0/1/0/0/1 | 139 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/commands** · `src/commands/doctor-session-sqlite-warnings.ts` | 2/0/0/0/1 | 61 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/commands** · `src/commands/doctor-session-transcript-headers.ts` | 0/1/0/1/0 | 97 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/commands** · `src/commands/doctor-session-transcript-labels.ts` | 0/0/0/1/0 | 79 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/commands** · `src/commands/doctor-skill-workshop-retire-proposals.ts` | 0/0/1/0/0 | 545 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/commands** · `src/commands/doctor-telegram-general-topic-conversations.ts` | 10/0/0/1/1 | 57 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/commands** · `src/commands/doctor-update-rehearsal-inventory.ts` | 0/1/0/0/0 | 328 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/commands** · `src/commands/doctor-update-run.ts` | 1/1/0/0/0 | 65 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/commands** · `src/commands/doctor-update-schema-guard.ts` | 1/1/0/0/0 | 70 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/commands** · `src/commands/doctor/auth-alias-receipt.ts` | 0/0/2/0/0 | 151 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/commands** · `src/commands/doctor/cron/store-inventory.ts` | 2/0/0/0/0 | 14 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/commands** · `src/commands/doctor/cron/store-repair.ts` | 1/0/1/0/0 | 97 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/commands** · `src/commands/doctor/shared/legacy-webhook-pins.ts` | 0/1/0/0/0 | 102 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/commands** · `src/commands/doctor/shared/session-entry-rewrite.ts` | 4/0/0/1/1 | 58 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-archive-store-kernel.ts` | 2/0/0/0/0 | 31 | Only offline full-store reset calls these at session-accessor.sqlite-reset.ts:65,239 via commands/cleanup-utils.ts; other archive operations retain native lifecycle callers | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-canonical-inventory.ts` | 0/0/0/0/4 | 339 | Doctor callers only: commands/doctor-session-canonical-candidates.ts:94; doctor-session-canonical-keys.ts:132; doctor-state-integrity.ts:1280; doctor-session-title-repair.ts:118; doctor-session-delivery-state.ts:112; doctor/shared/codex-route-session-repair.ts:551,552. | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-reset.ts` | 3/0/0/0/1 | 47 | Only cleanup-utils.ts:620,628,641 reaches full-store reset from reset.ts:154 and onboard-helpers.ts:254, including CLI dev bootstrap; Gateway session reset is separate | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-write.ts` | 0/0/0/1/0 | 109 | Only production invocations are developer benchmarks scripts/bench-agent-database-holds.ts:142 and scripts/bench-session-history.ts:383; remaining references are internal reexports and excluded test helpers. Synchronous replacement is separately retained. | | **src/config/sessions** · `src/config/sessions/session-cold-storage-backup.ts` | 1/2/0/0/0 | 21 | infra/backup-sqlite-snapshot.ts:292 via backup-create.ts:320,332,352; snapshot/openclaw-snapshot-copy.ts:72 via local-repository.ts:148 and git-backup.ts:310. Roots are commands/backup.ts:52, backup-sqlite.ts:80, backup-git.ts:131, Doctor/update backup and developer reliability scripts; SQL targets a temporary snapshot. | | **src/cron** · `src/cron/scratch-read.kernel.ts` | 2/0/0/0/0 | 39 | Doctor-only native reads: src/commands/doctor-heartbeat-scratch-migration.ts:516,567,588 and doctor-heartbeat-task-migration.ts:94,411 → scratch-store.ts:33,42,52. Worker sibling src/cron/store/read-command.ts:54. | | **src/cron** · `src/cron/scratch-store.ts` | 2/0/1/0/0 | 126 | Sole native caller src/commands/doctor-heartbeat-scratch-migration.ts:625: revision-guarded migration compensation. | | **src/cron** · `src/cron/scratch-write.kernel.ts` | 2/0/1/0/0 | 94 | Doctor migration/compensation at src/commands/doctor-heartbeat-scratch-migration.ts:570,617; worker sibling src/cron/store/scratch.worker.ts:28. | | **src/cron** · `src/cron/store.ts` | 0/0/1/0/0 | 181 | Direct transaction uses Doctor legacy-repair.ts:395 hooks; ordinary load/save dispatch to workers; transitive current-authority SQL remains mixed | | **src/cron** · `src/cron/store/quarantine.kernel.ts` | 2/0/0/0/0 | 81 | Shared by worker operations and native Doctor store-repair transactions | | **src/cron** · `src/cron/store/row-codec.ts` | 9/1/0/0/0 | 262 | Cron worker kernels or Doctor legacy-repair.ts:395 transactionHooks / store-repair.ts:178 / doctor-heartbeat-task-migration.ts:261,308; the native current-job reader was deleted; standing-generation reads stay T1 | | **src/cron** · `src/cron/store/runtime-authority-store.ts` | 4/0/0/0/0 | 87 | load/save kernels run in Cron workers; native save hooks only in commands/doctor/cron/legacy-repair.ts:395 | | **src/infra** · `src/infra/package-update-activation-immutable.ts` | 5/0/0/0/0 | 99 | Adoption/preparation writers are called only by update-command-immutable.ts through update-immutable-install.ts; Gateway inspection dispatches immutableInstall.read through the SQLite read-only worker | | **src/infra** · `src/infra/package-update-activation-journal.ts` | 7/0/0/0/0 | 117 | CLI admission/status: src/cli/update-cli/update-command-run.ts:208, status.ts:240. Guarded swap: update-command-package.ts:542,645 → src/infra/package-update-swap.ts:342,356 → package-update-activation-prepare.ts:189,298; standalone recovery package-update-activation-sealed.ts opens strict or settlement-only inspection through openJournal; both are cold CLI-only paths with unchanged SQL operations. | | **src/infra** · `src/infra/package-update-activation-status.ts` | 2/0/0/0/0 | 50 | CLI status src/cli/update-cli/status.ts:240 → src/infra/package-update-activation.ts:144; CLI preflight update-command-run.ts:208 → activation.ts:79,40. | | **src/infra** · `src/infra/restart-handoff.ts` | 1/0/1/0/0 | 379 | Only CLI gateway-cli/register-restart-handoff.ts:61 calls consumeGatewayRestartHandoffSync and its private removeCurrent helper; shared row reader also runs at Gateway boot and remains T1. | | **src/infra** · `src/infra/restart-intent.ts` | 2/1/0/0/0 | 382 | Native service CLI intent recording and exact-owned cleanup: daemon-cli/lifecycle-restart-intent.ts, lifecycle-unmanaged.ts, daemon/launchd-stop.ts; runtime signal consumption uses restart-lifecycle.worker.ts. Gateway system-agent uses host.request, not daemon lifecycle. | | **src/infra** · `src/infra/restart-sentinel-store.ts` | 1/1/0/0/0 | 193 | src/infra/restart-sentinel.worker.ts:74,150 plus generated one-shot child in src/infra/update-managed-service-handoff.ts:101,439,1639,1649. | | **src/infra** · `src/infra/update-candidate-state.ts` | 1/0/0/0/0 | 169 | CLI backup src/cli/update-cli/update-command-database-backup.ts:104 → src/infra/update-database-backup.ts:387; baseline update-command-initialization-run.ts:224 → update-recovery-baseline-capture.ts:343; worker inventory modes update-candidate-state.worker.ts:49,68,73. | | **src/infra** · `src/infra/update-managed-service-handoff-database-recovery.ts` | 2/0/0/0/0 | 137 | Explicit update recover CLI -> recoverImmutableUpdate -> withImmutableUpdateOwner({ recover: true }) only; ordinary lease and Gateway readers never call this cold-journal admission | | **src/infra** · `src/infra/update-run-ledger.ts` | 1/3/0/0/0 | 141 | active initializer requires stale-run opt-in only from src/cli/update-cli/update-command-run.ts:304,310,313; guard src/infra/update-run-ledger.ts:127 excludes Gateway/campaign callers. Repairs: update-repair-command.ts:141; interruption: update-command-mutable-signals.ts:158. | | **src/secrets** · `src/secrets/store/secret-store.ts` | 1/0/1/0/0 | 313 | Only cli/secrets-store-cli.ts:251 mutates allowed hosts; runtime reads and other writes remain T1 | | **src/state** · `src/state/openclaw-agent-db-path-repair.ts` | 4/0/0/0/0 | 34 | Only noteDoctorAgentDatabasePathHealth calls the repair, within its Doctor transaction. Entry: runStateIntegrityHealth in src/flows/doctor-health-contribution-runners.state.ts. | | **src/state** · `src/state/openclaw-agent-db-registry.ts` | 1/0/1/0/0 | 190 | Plural unregister: CLI claw removal src/claws/lifecycle-delete-support.ts:519 → cli/claws-cli.runtime.ts:562; CLI agent deletion src/commands/agents.commands.delete.ts:450 → cli/program/register.agent.ts:183. | | **src/state** · `src/state/openclaw-state-ownership-operations.ts` | 1/0/1/0/0 | 76 | Only src/cli/program/register.database.ts:56 invokes claim; its private claimOwnershipRow calls remain within this CLI operation. | | **src/state** · `src/state/openclaw-state-snapshot-sanitizer.ts` | 2/0/0/0/0 | 52 | CLI SQLite/git backups: src/snapshot/local-repository.ts:148, git-backup.ts:310 → openclaw-snapshot-copy.ts:68; archive/Doctor backup via src/infra/backup-create.ts:320,332,352 → backup-sqlite-snapshot.ts:287; developer reliability scripts also use the provider. | | **src/state** · `src/state/user-channel-identities.ts` | 6/3/2/0/0 | 120 | Gateway uses user-channel-identities.worker.ts and state-read; native resolver serves channel-operator-authority.ts CLI/updater capture via update-requester-authority.ts | | **src/state** · `src/state/user-model-accounts.ts` | 2/0/1/0/0 | 572 | Only src/commands/doctor-auth-flat-profiles.ts:1727 (Doctor alias migration), invoked by doctor/repair-sequencing.ts:189 and doctor/auth-profile-repair.ts:45. | | **src/state** · `src/state/user-profile-events.ts` | 1/0/0/0/0 | 94 | Native calls only user-profiles-owner-migration.ts:68 and user-profiles-tailscale-migration.ts:98 from src/commands/doctor/repair-sequencing.ts:353,354; remaining calls run in profile/preferences/channel-identity workers. | | **src/state** · `src/state/user-profiles-owner.ts` | 0/2/0/0/0 | 16 | Native reader only user-profiles-owner-migration.ts:25,52 → src/commands/doctor/shared/preview-warnings.ts:683 and doctor/repair-sequencing.ts:354; other caller is user-profiles.worker.ts:78. | | **src/trajectory** · `src/trajectory/runtime-store.sqlite.ts` | 0/1/0/0/0 | 251 | Only CLI export supplies maxEventCount: src/cli/program/register.status-health-sessions.ts:431 → commands/export-trajectory.ts:158 → trajectory/command-export.ts:80 → trajectory/export.ts:415,420. Keep polling/payload expressions T1. | | **src/tui** · `src/tui/tui-last-session.kernel.ts` | 1/0/0/0/0 | 23 | CLI/Doctor/developer one-shot; reclassify if called by Gateway | ### W | Owner / file | Calls (Q/F/S/A/R) | First line | Exposure evidence | | ------------------------------------------------------------------------------------------------------------------- | ----------------: | ---------: | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **extensions/imessage** · `extensions/imessage/src/chat-db.worker.ts` | 2/2/0/0/0 | 42 | Worker implementation; keep SQL in this owner | | **extensions/logbook** · `extensions/logbook/src/store.worker.ts` | 9/7/0/0/0 | 273 | Worker implementation; keep SQL in this owner | | **extensions/memory-core** · `extensions/memory-core/src/memory-entry-origin-reads.ts` | 3/0/0/0/0 | 48 | Worker implementation; keep SQL in this owner | | **extensions/memory-core** · `extensions/memory-core/src/memory-entry-origins-delete.ts` | 1/0/0/0/0 | 39 | Worker implementation; keep SQL in this owner | | **extensions/memory-core** · `extensions/memory-core/src/memory-forget-index-read.ts` | 5/0/0/0/0 | 36 | Worker implementation; keep SQL in this owner | | **extensions/memory-core** · `extensions/memory-core/src/memory-forget-kernel.ts` | 5/0/0/0/0 | 42 | Worker implementation; keep SQL in this owner | | **extensions/memory-core** · `extensions/memory-core/src/memory-session-tombstones.ts` | 3/0/0/0/0 | 30 | memory-entry-origins.worker.ts -> memory-forget-kernel.ts owns tombstone writes; manager-publication.worker.ts owns every hasMemorySessionTombstone call, including the session.current predicate retained under workspace custody for shadow publication. | | **extensions/memory-core** · `extensions/memory-core/src/memory/manager-embedding-cache.ts` | 4/0/0/0/0 | 94 | Worker implementation; keep SQL in this owner | | **extensions/memory-core** · `extensions/memory-core/src/memory/manager-search.worker.ts` | 1/0/0/0/1 | 114 | Worker implementation; keep SQL in this owner | | **extensions/memory-core** · `extensions/memory-core/src/memory/manager-source-index-kernel.ts` | 4/1/0/0/0 | 53 | Worker implementation; keep SQL in this owner | | **extensions/memory-core** · `extensions/memory-core/src/memory/manager-source-state.ts` | 2/0/0/0/0 | 108 | manager-publication.worker.ts source.state and manager-search.worker.ts source-state/recall-metadata are the only runtime callers. Source synchronization and inspection await MemoryIndexDatabase.readSourceState; the kernel remains directly callable only by isolated tests. | | **extensions/memory-core** · `extensions/memory-core/src/standing-intents-kernel.ts` | 8/1/0/0/0 | 38 | Worker implementation; keep SQL in this owner | | **extensions/qa-lab** · `extensions/qa-lab/src/execution-identity-storage-inspection.worker.ts` | 1/2/0/0/0 | 59 | Worker implementation; keep SQL in this owner | | **extensions/team-reports** · `extensions/team-reports/src/store.worker.ts` | 17/5/0/0/0 | 127 | Worker implementation; keep SQL in this owner | | **extensions/workboard** · `extensions/workboard/src/sqlite-store-kernel.ts` | 1/7/0/0/0 | 76 | Worker implementation; keep SQL in this owner | | **extensions/workboard** · `extensions/workboard/src/sqlite-store-sessions-board.ts` | 4/1/0/0/0 | 69 | Worker implementation; keep SQL in this owner | | **extensions/workboard** · `extensions/workboard/src/sqlite-store-write.ts` | 0/1/0/0/0 | 96 | Worker implementation; keep SQL in this owner | | **packages/memory-host-sdk** · `packages/memory-host-sdk/src/host/memory-recall-metadata.ts` | 2/0/0/0/0 | 97 | extensions/memory-core/src/memory/manager-search.worker.ts owns curated and recall-metadata reads, including fused session-only keyword requests. The private-local-only memory-core-host-engine-storage facade only re-exports kernels; no host runtime reader remains. | | **packages/memory-host-sdk** · `packages/memory-host-sdk/src/memory-entry-origins.ts` | 1/0/0/0/0 | 67 | Worker implementation; keep SQL in this owner | | **src/acp** · `src/acp/runtime/session-meta-entry.worker.ts` | 0/0/0/1/0 | 27 | Worker implementation; keep SQL in this owner | | **src/acp** · `src/acp/runtime/session-meta-keys.ts` | 1/0/0/0/0 | 37 | src/acp/runtime/session-meta-list.ts:21 submits acpSessions.list → src/state/openclaw-state-read.worker.ts:264. | | **src/acp** · `src/acp/runtime/session-meta-read.worker.ts` | 2/0/0/0/0 | 44 | Worker implementation; keep SQL in this owner | | **src/agents** · `src/agents/mcp-oauth-store.kernel.ts` | 3/2/0/0/0 | 206 | Worker implementation; keep SQL in this owner | | **src/agents** · `src/agents/mcp-oauth-store.worker.ts` | 5/0/2/0/0 | 54 | Worker implementation; keep SQL in this owner | | **src/agents** · `src/agents/plugin-model-catalog-read.worker.ts` | 1/0/0/0/0 | 29 | Worker implementation; keep SQL in this owner | | **src/agents** · `src/agents/plugin-model-catalog.worker.ts` | 3/0/0/0/0 | 105 | Worker implementation; keep SQL in this owner | | **src/agents** · `src/agents/workspace-state-store.kernel.ts` | 7/0/0/0/0 | 366 | workspace.replaceAttestation, workspace.expire and workspace.delete dispatch in the shared-state worker; shared snapshot/alias helpers retain Doctor/migration exposure | | **src/agents** · `src/agents/workspace-state-store.worker.ts` | 2/1/3/0/0 | 45 | Worker implementation; keep SQL in this owner | | **src/agents/auth-profiles** · `src/agents/auth-profiles/shared-store-bootstrap.worker.ts` | 0/1/1/0/0 | 39 | Worker implementation; keep SQL in this owner | | **src/agents/auth-profiles** · `src/agents/auth-profiles/store.worker.ts` | 0/0/3/0/0 | 46 | Worker implementation; keep SQL in this owner | | **src/agents/harness** · `src/agents/harness/native-hook-relay-store.kernel.ts` | 7/0/0/0/0 | 91 | Worker implementation; keep SQL in this owner | | **src/agents/harness** · `src/agents/harness/native-hook-relay-store.worker.ts` | 0/0/1/0/0 | 16 | Worker implementation; keep SQL in this owner | | **src/agents/sandbox** · `src/agents/sandbox/registry-import.worker.ts` | 0/0/1/0/0 | 16 | Worker implementation; keep SQL in this owner | | **src/agents/sandbox** · `src/agents/sandbox/registry-write.worker.ts` | 0/0/1/0/0 | 20 | Worker implementation; keep SQL in this owner | | **src/agents/sandbox** · `src/agents/sandbox/registry.kernel.ts` | 4/0/0/0/0 | 121 | Registry mutations, including reservation and removal-intent selection, run only through registry-write.worker.ts -> executeSandboxRegistryCommand; import only registry-import.worker.ts. List helpers run through openclaw-state-read-registry.ts in the read worker. The row reader remains T1 for released synchronous sandbox callbacks held across provider waits and deferred process launch; see worker-access.md. | | **src/agents/sessions** · `src/agents/sessions/session-manager-maintenance.worker.ts` | 0/0/0/1/0 | 43 | Worker implementation; keep SQL in this owner | | **src/agents/sessions** · `src/agents/sessions/session-manager-metadata.worker.ts` | 0/0/0/2/0 | 273 | Worker implementation; keep SQL in this owner | | **src/agents/subagents** · `src/agents/subagents/completion/subagent-completion-admission.worker.ts` | 1/0/1/0/0 | 59 | Worker implementation; keep SQL in this owner | | **src/agents/subagents** · `src/agents/subagents/completion/subagent-completion-queue-receipt.ts` | 1/0/0/0/0 | 14 | Worker implementation; keep SQL in this owner | | **src/agents/subagents** · `src/agents/subagents/registry/subagent-registry.store.kernel.ts` | 3/0/0/0/0 | 48 | Registry persistence and completion admission workers invoke the conflict and batch write kernels. Completion mutation writes are reached only through the admission worker; no native writer caller remains. | | **src/agents/subagents** · `src/agents/subagents/registry/subagent-registry.store.sqlite.ts` | 2/0/0/0/0 | 41 | Row reads are only completion/subagent-completion-admission.worker.ts:94,155 or its mutation kernel at :246,274,293,412,523,562,576 (admission.worker.ts:188). Session-list loader at store.sqlite.ts:409 is called only by src/state/openclaw-state-read.worker.ts:196; other native registry readers remain T1. | | **src/agents/subagents** · `src/agents/subagents/registry/subagent-registry.store.worker.ts` | 0/0/1/0/0 | 174 | Worker implementation; keep SQL in this owner | | **src/agents/subagents** · `src/agents/subagents/spawn/acp-parent-stream-store.worker.ts` | 1/1/0/0/0 | 49 | Worker implementation; keep SQL in this owner | | **src/agents/worktrees** · `src/agents/worktrees/capacity.worker.ts` | 3/0/1/0/0 | 90 | Worker implementation; keep SQL in this owner | | **src/agents/worktrees** · `src/agents/worktrees/pending-slots.worker.ts` | 5/0/0/0/0 | 26 | Worker implementation; keep SQL in this owner | | **src/agents/worktrees** · `src/agents/worktrees/provisioned-snapshot.worker.ts` | 2/0/0/0/0 | 14 | Worker implementation; keep SQL in this owner | | **src/agents/worktrees** · `src/agents/worktrees/registry-read.kernel.ts` | 7/0/0/0/0 | 137 | Runtime reads and exact-row predicates use worktrees/dispatch.worker.ts and registry-run-end.worker.ts through the shared-state worker registry. Cleanup inventory uses openclaw-state-read-registry.ts in the read worker. Native fixture readers live only in registry.test-support.ts; Doctor migration lists keep their separate registry.ts queries. | | **src/agents/worktrees** · `src/agents/worktrees/registry-retirement.worker.ts` | 2/0/2/0/0 | 33 | Worker implementation; keep SQL in this owner | | **src/agents/worktrees** · `src/agents/worktrees/registry-run-end.worker.ts` | 11/0/1/0/0 | 72 | Worker implementation; keep SQL in this owner | | **src/agents/worktrees** · `src/agents/worktrees/run-lease-owner.ts` | 2/0/0/0/0 | 104 | Run-lease inventory is dispatched by openclaw-state-read-registry.ts in the read worker. Registry mutation custody is called only by registry-run-end.worker.ts. The actual lease read/reap primitives remain synchronous exemptions. | | **src/agents/worktrees** · `src/agents/worktrees/run-lease-store.kernel.ts` | 2/0/0/0/0 | 28 | worktrees/dispatch.worker.ts registers admission through WorkerWriteOperationContext.writeAdmitted; src/state/openclaw-state-worker-registry.ts loads the handler. Shared release/lease cleanup remain T1. | | **src/agents/worktrees** · `src/agents/worktrees/template-registry.worker.ts` | 11/0/1/0/0 | 62 | Worker implementation; keep SQL in this owner | | **src/audit** · `src/audit/audit-event-read.kernel.ts` | 1/0/0/0/0 | 53 | Worker implementation; keep SQL in this owner | | **src/audit** · `src/audit/audit-event-store.ts` | 2/2/2/0/0 | 553 | Worker implementation; keep SQL in this owner | | **src/audit** · `src/audit/audit-identity.ts` | 1/4/0/0/0 | 76 | Worker implementation; keep SQL in this owner | | **src/audit** · `src/audit/execution-decision-facts.ts` | 4/4/2/0/0 | 148 | Worker implementation; keep SQL in this owner | | **src/audit** · `src/audit/execution-identity-context.ts` | 4/3/2/0/0 | 122 | Worker implementation; keep SQL in this owner | | **src/audit** · `src/audit/execution-owner-lifecycle-binding-store.ts` | 2/2/0/0/0 | 60 | Worker implementation; keep SQL in this owner | | **src/audit** · `src/audit/execution-owner-lifecycle-receipts.ts` | 1/3/0/0/0 | 58 | Worker implementation; keep SQL in this owner | | **src/audit** · `src/audit/message-delivery-audit-store.ts` | 1/2/0/0/0 | 122 | Worker implementation; keep SQL in this owner | | **src/audit** · `src/audit/message-delivery-progress-store.ts` | 4/5/3/0/0 | 78 | Worker implementation; keep SQL in this owner | | **src/audit** · `src/audit/message-execution-binding.ts` | 1/1/1/0/0 | 83 | Worker implementation; keep SQL in this owner | | **src/channels** · `src/channels/message/ingress-queue-health.kernel.ts` | 2/0/0/0/0 | 17 | Worker implementation; keep SQL in this owner | | **src/channels** · `src/channels/message/ingress-queue.kernel.ts` | 16/1/0/0/0 | 40 | Worker implementation; keep SQL in this owner | | **src/channels** · `src/channels/message/ingress-queue.worker.ts` | 0/0/1/0/0 | 48 | Worker implementation; keep SQL in this owner | | **src/claws** · `src/claws/provenance-read.kernel.ts` | 0/1/0/0/0 | 165 | Only src/state/openclaw-state-read.worker.ts:232 and src/claws/provenance-write.worker.ts:48 execute the reader. | | **src/claws** · `src/claws/provenance-write.worker.ts` | 2/1/2/0/0 | 36 | Worker implementation; keep SQL in this owner | | **src/claws** · `src/claws/removal-journal.worker.ts` | 0/0/1/0/0 | 39 | Worker implementation; keep SQL in this owner | | **src/config** · `src/config/config-journal-snapshot.worker.ts` | 0/0/1/0/0 | 10 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/cleanup-service-read.worker.ts` | 0/0/0/0/1 | 12 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/conversation-delivery-store.kernel.ts` | 3/0/0/0/0 | 173 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/legacy-main-session-ledger.read.worker.ts` | 0/1/0/0/0 | 8 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/provider-review-store.worker.ts` | 0/0/0/1/0 | 24 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-archive-read.ts` | 1/3/0/0/1 | 111 | Only session-transcript.worker.ts:230 (presence) and session-accessor.sqlite-archive.worker.ts:483,491 (page/final) call these readers; shared archive listing remains T1. | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-archive-selection.ts` | 0/1/0/0/0 | 192 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-archive.worker.ts` | 1/0/0/0/0 | 349 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-entry-list.read.ts` | 1/0/0/0/0 | 210 | Only session-entry-read-runtime.ts:458,488 produces cronRetention/expiredCronRuns through withSessionStoreReaderInWorker; session-entry-read.worker.ts:166 calls listSessionEntriesReadOnly. Other native list callers omit both selectors; only the rows initializer is worker-only. | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-maintenance-transaction.ts` | 0/0/0/0/1 | 258 | Only session-transcript.worker.ts:276 and openclaw-agent-execution-maintenance.ts:61 call this read-only planner; the latter owner is constructed only in openclaw-agent-execution.worker.ts:372. Shared native maintenance transactions remain T1. | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-mutation-worker.runtime.ts` | 0/0/0/1/0 | 402 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-summary.ts` | 1/0/0/0/1 | 56 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-binding.ts` | 0/1/0/0/0 | 15 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-accessor.sqlite-transcript-reports.worker.ts` | 0/0/0/1/0 | 129 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-canonical-validation.ts` | 5/0/0/0/0 | 61 | Only session-accessor.sqlite-mutation-worker.runtime.ts:375,280,381 calls these operations in the mutation-worker message handler. Shared host readiness hasPendingCanonicalSessionValidation stays T1. | | **src/config/sessions** · `src/config/sessions/session-cold-storage-selection.ts` | 2/0/0/0/1 | 32 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-cold-storage-worker.ts` | 11/1/0/1/6 | 149 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-entry-cohort.worker.ts` | 1/0/0/0/1 | 49 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-entry-current-admission.worker.ts` | 0/0/0/0/1 | 193 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-entry-list.worker.ts` | 1/0/0/0/1 | 35 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-entry-patch.worker.ts` | 0/0/0/1/0 | 58 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-entry-read.worker.ts` | 1/0/0/0/5 | 95 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-history-archive-pruning.worker.ts` | 4/0/0/3/1 | 33 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-history-read-operation.worker.ts` | 0/0/0/0/9 | 126 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-incognito-compute.worker.ts` | 0/0/0/1/0 | 68 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-incognito-entry-creation.worker.ts` | 0/0/0/1/0 | 37 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-incognito-entry-patch.worker.ts` | 0/0/0/2/0 | 48 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-incognito-lifecycle.worker.ts` | 0/0/0/1/0 | 80 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-incognito-outbox.worker.ts` | 0/1/0/0/0 | 65 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-incognito-side-data.worker.ts` | 0/0/0/1/0 | 90 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-incognito-transcript.worker.ts` | 0/0/0/1/0 | 97 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-incognito.worker.ts` | 0/0/0/3/0 | 401 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-membership-facts.ts` | 2/0/0/0/0 | 60 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-message-rewrite.worker.ts` | 0/1/0/0/0 | 563 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-pending-input-history-read.worker.ts` | 0/0/0/0/1 | 12 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-pending-input-withdrawal.worker.ts` | 2/1/0/1/0 | 33 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-retirement-read.worker.ts` | 1/0/0/0/1 | 16 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-transcript-hydration-read.worker.ts` | 0/0/0/0/1 | 20 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-transcript-index-status.worker.ts` | 7/5/0/0/0 | 116 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-transcript-projection-publication.worker.ts` | 0/1/0/0/0 | 109 | Worker implementation; keep SQL in this owner | | **src/config/sessions** · `src/config/sessions/session-transcript.worker.ts` | 0/0/0/0/13 | 143 | Worker implementation; keep SQL in this owner | | **src/cron** · `src/cron/store/dispatch.worker.ts` | 0/0/4/0/0 | 138 | Worker implementation; keep SQL in this owner | | **src/cron** · `src/cron/store/external-state.worker.ts` | 0/0/1/0/0 | 20 | Worker implementation; keep SQL in this owner | | **src/cron** · `src/cron/store/guarded-mutation.worker.ts` | 0/0/1/0/0 | 118 | Worker implementation; keep SQL in this owner | | **src/cron** · `src/cron/store/job-name.kernel.ts` | 1/0/0/0/0 | 23 | Worker implementation; keep SQL in this owner | | **src/cron** · `src/cron/store/load.worker.ts` | 0/0/1/0/0 | 18 | Worker implementation; keep SQL in this owner | | **src/cron** · `src/cron/store/row-codec.ts` | 2/0/0/0/0 | 330 | run-admission.worker.ts:458 and worker runtime-state saves; Doctor never requests stateOnly saves | | **src/cron** · `src/cron/store/run-admission.worker.ts` | 0/0/7/0/0 | 68 | Worker implementation; keep SQL in this owner | | **src/cron** · `src/cron/store/run-history.kernel.ts` | 6/0/0/0/0 | 110 | Worker implementation; keep SQL in this owner | | **src/cron** · `src/cron/store/run-receipt-delivery.ts` | 1/1/0/0/0 | 29 | Worker implementation; keep SQL in this owner | | **src/cron** · `src/cron/store/run-receipt-read.ts` | 2/0/0/0/0 | 127 | read-command.ts currentReceipt/activeReceiptOwners and run-recovery.read.ts route through openclaw-state-read.worker.ts; remaining direct callers are run-admission.worker.ts and runtime-maintenance.worker.ts | | **src/cron** · `src/cron/store/run-receipt-store.ts` | 7/2/0/0/0 | 138 | Admission/recovery/reservation/state/maintenance/dispatch workers own direct primitives; service message guards consume receipt-authority-owner facts without the deleted native current-job reader | | **src/cron** · `src/cron/store/run-receipt-trigger-state.ts` | 1/2/0/0/0 | 58 | Worker implementation; keep SQL in this owner | | **src/cron** · `src/cron/store/run-recovery.worker.ts` | 0/0/1/0/0 | 20 | Worker implementation; keep SQL in this owner | | **src/cron** · `src/cron/store/runtime-maintenance.worker.ts` | 0/0/3/0/0 | 34 | Worker implementation; keep SQL in this owner | | **src/cron** · `src/cron/store/save.worker.ts` | 0/0/1/0/0 | 24 | Worker implementation; keep SQL in this owner | | **src/cron** · `src/cron/store/scheduler-reservation.worker.ts` | 0/0/1/0/0 | 58 | Worker implementation; keep SQL in this owner | | **src/cron** · `src/cron/store/scheduler-state.worker.ts` | 0/0/1/0/0 | 33 | Worker implementation; keep SQL in this owner | | **src/cron** · `src/cron/store/scratch.worker.ts` | 0/0/1/0/0 | 19 | Worker implementation; keep SQL in this owner | | **src/cron** · `src/cron/store/startup-plan.worker.ts` | 0/0/1/0/0 | 29 | Worker implementation; keep SQL in this owner | | **src/gateway** · `src/gateway/cli-session-history-index.worker.ts` | 4/3/0/0/0 | 363 | Worker implementation; keep SQL in this owner | | **src/gateway** · `src/gateway/github-publication-shared-read.kernel.ts` | 0/6/0/0/0 | 37 | Worker implementation; keep SQL in this owner | | **src/gateway** · `src/gateway/managed-image-record-store.kernel.ts` | 6/3/1/0/0 | 105 | Worker implementation; keep SQL in this owner | | **src/gateway** · `src/gateway/mention-inbox.worker.ts` | 0/0/1/0/0 | 31 | Worker implementation; keep SQL in this owner | | **src/gateway** · `src/gateway/operator-approval-standing-grants.ts` | 3/3/1/0/0 | 275 | Only openclaw-state-read.worker.ts validates and operator-approval-store.operations.ts consumes through the existing workers; bash-tools.exec-cron-grant.ts awaits operator-approval-store.ts while retaining the Gateway authority interval. No native lookup/consume facade remains.; Only state/openclaw-state-read.worker.ts:495; server-methods/exec-approval.ts:462 -> operator-approval-store.ts:273 uses readApprovalStore -> executeExistingOpenClawStateRead at :248 even when a guard exists. | | **src/gateway** · `src/gateway/operator-approval-store.kernel.ts` | 5/1/2/0/0 | 93 | exec-approval-manager.ts:125 insert and operator-approval-session-events.ts:194 pending supply no native guard; operator-approval-store.ts:138,173 selects worker dispatch to operator-approval-store.operations.ts:57,65 via state/openclaw-state-worker-registry.ts:119. Other approval operations retain native compatibility.; Only openclaw-state-read.worker.ts:489 serves approval history; the native compatibility operation map has no history operation | | **src/gateway** · `src/gateway/operator-approval-store.receipts.ts` | 1/2/0/0/0 | 418 | Worker implementation; keep SQL in this owner | | **src/gateway** · `src/gateway/operator-approval-store.rows.ts` | 0/1/0/0/0 | 389 | Only operator-approval-store.kernel.ts:98 insert calls it. Sole facade caller exec-approval-manager.ts:125 passes assertCurrent but no native guard, so operator-approval-store.ts:173 dispatches the registered worker operation. | | **src/gateway** · `src/gateway/operator-approval-store.transitions.ts` | 3/0/2/0/0 | 241 | operator-approval-session-events.ts:178 expiry and exec-approval-manager.ts:644 consume supply no native guard; operator-approval-store.ts:173 -> operator-approval-store.operations.ts:85,89 worker dispatch. Expiry also runs from worker-only pending kernel at operator-approval-store.kernel.ts:233. | | **src/gateway** · `src/gateway/session-group-catalog.kernel.ts` | 9/0/1/0/0 | 44 | state-read.worker.ts:334 and state-worker-runtime.ts:222; readSessionGroupCatalogEntry stays T1 for native incognito categories | | **src/gateway** · `src/gateway/session-group-registration.kernel.ts` | 4/0/1/0/0 | 11 | Worker implementation; keep SQL in this owner | | **src/gateway/worker-environments** · `src/gateway/worker-environments/inference-store.kernel.ts` | 7/3/0/0/0 | 103 | Worker implementation; keep SQL in this owner | | **src/gateway/worker-environments** · `src/gateway/worker-environments/local-workspace-store.kernel.ts` | 0/6/0/0/0 | 19 | Worker implementation; keep SQL in this owner | | **src/gateway/worker-environments** · `src/gateway/worker-environments/local-workspace-store.worker.ts` | 0/0/1/0/0 | 31 | Worker implementation; keep SQL in this owner | | **src/gateway/worker-environments** · `src/gateway/worker-environments/placement-dispatch-store.worker.ts` | 2/0/1/0/0 | 42 | Worker implementation; keep SQL in this owner | | **src/gateway/worker-environments** · `src/gateway/worker-environments/placement-drain.ts` | 1/0/0/0/0 | 75 | Only placement turn/transition workers and the move mutation kernel in placement-lifecycle.worker.ts drain placements. | | **src/gateway/worker-environments** · `src/gateway/worker-environments/placement-move-intent.ts` | 5/1/0/0/0 | 271 | Only placement-dispatch-store.worker.ts:69, placement-turn-claims.worker.ts:72 and placement-read-projection.ts:85 call the batch reader; projection itself is only called by state/openclaw-state-read.worker.ts:670. Native getPlacementMove uses another reader.; Only placement-lifecycle.worker.ts invokes move mutations; placement-store.ts retains only the native getPlacementMove getter for final effect guards. | | **src/gateway/worker-environments** · `src/gateway/worker-environments/placement-pending-failure.ts` | 3/0/0/0/0 | 54 | Only placementTurns.failResult in placement-turn-claims.worker.ts constructs the terminal-failure kernel, including its transaction-local transition helper; all runtime callers await its worker facade | | **src/gateway/worker-environments** · `src/gateway/worker-environments/placement-read-projection.ts` | 5/0/0/0/0 | 49 | Worker implementation; keep SQL in this owner | | **src/gateway/worker-environments** · `src/gateway/worker-environments/placement-row-codec.ts` | 5/0/0/0/0 | 210 | Snapshots use openclaw-state-read.worker.ts; placement-lifecycle.worker.ts serves point lookups on the existing placement actor. Native reconciliation guards remain T1.; placement-dispatch-store.worker.ts:38 and placement-turn-claims.ts:112 claim path; claims only invoked at placement-turn-claims.worker.ts:160,175,345. Native placement-store.ts:75,76 selects clear/wait/validate methods that do not claim.; Transitions run only in placement-transitions.worker.ts and prepared binding in placement-lifecycle.worker.ts. | | **src/gateway/worker-environments** · `src/gateway/worker-environments/placement-session-tool-operations.kernel.ts` | 12/0/0/0/0 | 36 | Factory runs in placement-session-tool-operations.worker.ts; claim, reconcile and terminal-failure cleanup now only run through placement-turn-claims.worker.ts | | **src/gateway/worker-environments** · `src/gateway/worker-environments/placement-transitions.worker.ts` | 3/0/0/0/0 | 165 | Worker implementation; keep SQL in this owner | | **src/gateway/worker-environments** · `src/gateway/worker-environments/placement-turn-claims.ts` | 7/0/0/0/0 | 82 | placement-store.ts:102 selects only native restart/wait/validation; claim/release/cancel mutations run in placement-turn-claims.worker.ts:102,117,191,200,287,355,360; placement-store.ts:132 supplies worker mutations; placement-turn-claims.worker.ts:299,355,360 executes release/manifest methods | | **src/gateway/worker-environments** · `src/gateway/worker-environments/placement-turn-claims.worker.ts` | 1/0/1/0/0 | 67 | Worker implementation; keep SQL in this owner | | **src/gateway/worker-environments** · `src/gateway/worker-environments/placement-workspace-journal.ts` | 8/0/0/0/0 | 62 | Read dispatch at state-read.worker.ts:653 and journal mutation factory at placement-workspace-journal.worker.ts:30; Acceptance at placement-turn-claims.worker.ts:190, journal abort via placement-workspace-journal.worker.ts:30 and manifest drain via placement-transitions.worker.ts:82; native move drain supplies no manifest and skips cleanup | | **src/gateway/worker-environments** · `src/gateway/worker-environments/placement-workspace-reservation.kernel.ts` | 0/1/0/0/0 | 70 | placement-dispatch-store.worker.ts:39 and placement-turn-claims.ts:93 claim path; claims only invoked at placement-turn-claims.worker.ts:160,175,345. Native placement-store.ts:75,76 selects clear/wait/validate methods. | | **src/gateway/worker-environments** · `src/gateway/worker-environments/placement-workspace-result.ts` | 11/0/0/0/0 | 69 | Mutation factory/helpers run only through placement-turn-claims.worker.ts:102,117,125,132,140,147,157,191,200,278,299,313,326,346; claim read also in placement-read-projection.ts:101 via state-read.worker.ts:666; Only placement-turn-claims.worker.ts:313 publishes staged results; native compatibility readers and pending-result transition guards stay T1 | | **src/gateway/worker-environments** · `src/gateway/worker-environments/prepared-environment-store.ts` | 4/3/0/0/0 | 92 | Prepared mutations run in store.worker.ts; consumption and its placement-reference predicate run only in placement-lifecycle.worker.ts. | | **src/gateway/worker-environments** · `src/gateway/worker-environments/prepared-pool-presence-store.worker.ts` | 2/1/0/0/0 | 69 | Worker implementation; keep SQL in this owner | | **src/gateway/worker-environments** · `src/gateway/worker-environments/session-attachment-store.ts` | 6/2/0/0/0 | 69 | Worker implementation; keep SQL in this owner | | **src/gateway/worker-environments** · `src/gateway/worker-environments/store-mutations.ts` | 5/2/0/0/0 | 35 | Worker implementation; keep SQL in this owner | | **src/gateway/worker-environments** · `src/gateway/worker-environments/store-row-codec.ts` | 3/1/0/0/0 | 193 | Worker implementation; keep SQL in this owner | | **src/gateway/worker-environments** · `src/gateway/worker-environments/store-transitions.ts` | 2/1/0/0/0 | 67 | Worker implementation; keep SQL in this owner | | **src/gateway/worker-environments** · `src/gateway/worker-environments/store-write.ts` | 0/1/0/0/0 | 5 | Worker implementation; keep SQL in this owner | | **src/gateway/worker-environments** · `src/gateway/worker-environments/store.kernel.ts` | 2/1/0/0/0 | 52 | Worker implementation; keep SQL in this owner | | **src/gateway/worker-environments** · `src/gateway/worker-environments/store.worker.ts` | 0/0/1/0/0 | 43 | Worker implementation; keep SQL in this owner | | **src/gateway/worker-environments** · `src/gateway/worker-environments/terminal-environment-retention.ts` | 2/1/0/0/0 | 63 | Worker implementation; keep SQL in this owner | | **src/gateway/worker-environments** · `src/gateway/worker-environments/transcript-commit-store.worker.ts` | 5/2/1/0/0 | 75 | Worker implementation; keep SQL in this owner | | **src/gateway/worker-environments** · `src/gateway/worker-environments/transcript-commit.worker.ts` | 0/0/0/1/0 | 72 | Worker implementation; keep SQL in this owner | | **src/infra** · `src/infra/delivery-queue-sqlite-namespace.kernel.ts` | 1/0/0/0/0 | 43 | src/infra/outbound/delivery-queue-enqueue.worker.ts:95; registered dispatch src/infra/delivery-queue.worker.ts:445. | | **src/infra** · `src/infra/delivery-queue-sqlite.kernel.ts` | 3/0/0/0/0 | 65 | Expiry snapshot: src/infra/delivery-queue.worker.ts:487 → outbound/delivery-queue-media-staging.kernel.ts:74. Failed count: delivery-queue.worker.ts:455. | | **src/infra** · `src/infra/delivery-queue.worker.ts` | 0/0/1/0/0 | 285 | Worker implementation; keep SQL in this owner | | **src/infra** · `src/infra/device-auth-store.kernel.ts` | 3/1/0/0/0 | 85 | Worker implementation; keep SQL in this owner | | **src/infra** · `src/infra/device-pairing-cloud-worker.ts` | 1/2/0/0/0 | 18 | Worker implementation; keep SQL in this owner | | **src/infra** · `src/infra/device-pairing-dispatch.worker.ts` | 0/0/1/0/0 | 33 | Worker implementation; keep SQL in this owner | | **src/infra** · `src/infra/device-pairing-join-code.worker.ts` | 4/1/0/0/0 | 28 | Worker implementation; keep SQL in this owner | | **src/infra** · `src/infra/exec-approvals-sqlite.ts` | 1/0/0/0/0 | 175 | exec-approvals-mutation.worker.ts restores an absent policy row through the shared-state writer. | | **src/infra** · `src/infra/gateway-boot-lifecycle.worker.ts` | 2/0/1/0/0 | 15 | Worker implementation; keep SQL in this owner | | **src/infra** · `src/infra/gateway-owner-lease.worker.ts` | 1/0/0/0/0 | 55 | Worker implementation; keep SQL in this owner | | **src/infra** · `src/infra/promotions-feed.kernel.ts` | 1/0/0/0/0 | 53 | Worker implementation; keep SQL in this owner | | **src/infra** · `src/infra/promotions-feed.worker.ts` | 0/0/2/0/0 | 28 | Worker implementation; keep SQL in this owner | | **src/infra** · `src/infra/push-apns-store-transaction.ts` | 2/2/0/0/0 | 36 | Worker implementation; keep SQL in this owner | | **src/infra** · `src/infra/push-apns-store.ts` | 1/1/0/0/0 | 367 | Worker implementation; keep SQL in this owner | | **src/infra** · `src/infra/push-apns-store.worker.ts` | 2/0/2/0/0 | 64 | Worker implementation; keep SQL in this owner | | **src/infra** · `src/infra/push-web-store.kernel.ts` | 9/4/4/0/0 | 132 | Only push-web-store.worker.ts:14,20,22,24,28,32,36,40,62 calls these operations; native preferences/upsert/delete-bound and their shared schema helper stay T1 | | **src/infra** · `src/infra/restart-lifecycle.worker.ts` | 1/1/0/0/0 | 24 | Worker implementation; keep SQL in this owner | | **src/infra** · `src/infra/restart-sentinel-store.ts` | 1/0/0/0/0 | 444 | Only src/infra/restart-sentinel.worker.ts:79; worker registration src/state/openclaw-state-worker-registry.ts:110. | | **src/infra** · `src/infra/session-cost-usage-worker.ts` | 0/0/0/0/3 | 244 | Worker implementation; keep SQL in this owner | | **src/infra** · `src/infra/sqlite-audit-record.kernel.ts` | 1/1/0/0/0 | 244 | src/config/config-journal-snapshot.worker.ts → config-journal-snapshot.kernel.ts; greeting comparisons use diagnostic.compareAndSet in src/infra/sqlite-audit-record.worker.ts. No native comparison adapter remains. | | **src/infra** · `src/infra/sqlite-page-cache.worker.ts` | 6/2/0/0/0 | 59 | Worker implementation; keep SQL in this owner | | **src/infra** · `src/infra/state-migrations.mcp-oauth.worker.ts` | 2/2/1/0/0 | 45 | Worker implementation; keep SQL in this owner | | **src/infra** · `src/infra/telemetry-store.kernel.ts` | 0/1/0/0/0 | 23 | Worker implementation; keep SQL in this owner | | **src/infra** · `src/infra/telemetry-store.worker.ts` | 0/0/1/0/0 | 26 | Worker implementation; keep SQL in this owner | | **src/infra** · `src/infra/update-candidate-exec-approvals.ts` | 1/0/0/0/0 | 29 | Worker implementation; keep SQL in this owner | | **src/infra** · `src/infra/update-candidate-plugins.ts` | 1/1/0/0/0 | 250 | Worker implementation; keep SQL in this owner | | **src/infra** · `src/infra/update-candidate-state.ts` | 3/0/0/0/0 | 683 | Snapshot sole executor src/infra/update-candidate-state.worker.ts:63 (isolated candidate child). | | **src/infra** · `src/infra/update-failure-report-receipt-store.ts` | 3/0/0/0/0 | 79 | Receipt mutations and authoritative revision rereads are called only by restart-sentinel.worker.ts; report submission and artifact sweep await that physical shared-state owner. | | **src/infra** · `src/infra/update-run-interruption-store.ts` | 1/0/0/0/0 | 120 | Worker implementation; keep SQL in this owner | | **src/infra** · `src/infra/update-run-reconciliation.read.ts` | 1/0/0/0/0 | 47 | Worker implementation; keep SQL in this owner | | **src/infra** · `src/infra/update-run-reconciliation.worker.ts` | 0/1/0/0/0 | 55 | Worker implementation; keep SQL in this owner | | **src/infra/outbound** · `src/infra/outbound/current-conversation-bindings.worker.ts` | 0/0/1/0/0 | 33 | Worker implementation; keep SQL in this owner | | **src/infra/outbound** · `src/infra/outbound/delivery-queue-enqueue.worker.ts` | 0/0/1/0/0 | 50 | Worker implementation; keep SQL in this owner | | **src/infra/outbound** · `src/infra/outbound/delivery-queue-media-staging.kernel.ts` | 1/0/0/0/0 | 83 | Worker implementation; keep SQL in this owner | | **src/infra/outbound** · `src/infra/outbound/delivery-queue-pending-failure.worker.ts` | 0/0/1/0/0 | 27 | Worker implementation; keep SQL in this owner | | **src/infra/outbound** · `src/infra/outbound/delivery-queue-storage.kernel.ts` | 1/0/0/0/0 | 104 | Worker implementation; keep SQL in this owner | | **src/media** · `src/media/generated-html-provenance.worker.ts` | 3/1/1/0/0 | 24 | Worker implementation; keep SQL in this owner | | **src/node-host** · `src/node-host/node-worker-launch-store.kernel.ts` | 12/3/1/0/0 | 129 | Worker implementation; keep SQL in this owner | | **src/node-host** · `src/node-host/node-worker-lineage-completion.ts` | 2/0/0/0/0 | 59 | Detached anchor spawned at src/process/supervisor/service-child-relay.ts:167; only service-child-group-anchor.ts:229,273 calls completion. W denotes the isolated supervisor subprocess. | | **src/node-host** · `src/node-host/node-worker-prepared-workspace-store.kernel.ts` | 5/2/1/0/0 | 31 | List/mutations run only in node-worker-journal.worker.ts:14,19,26,31,36; selectRow/write are mutation-only helpers; native findSync at node-worker-prepared-workspace-store.ts:31 reaches only find, which stays T1 | | **src/node-host** · `src/node-host/node-worker-turn-settlement.worker.ts` | 1/0/0/0/0 | 21 | Worker implementation; keep SQL in this owner | | **src/node-host** · `src/node-host/node-worker-turn-store.kernel.ts` | 1/3/1/0/0 | 52 | Worker implementation; keep SQL in this owner | | **src/pairing** · `src/pairing/pairing-store.worker.ts` | 4/0/0/0/0 | 83 | Worker implementation; keep SQL in this owner | | **src/plugin-state** · `src/plugin-state/plugin-blob-store.sqlite.ts` | 7/5/0/0/0 | 153 | Worker implementation; keep SQL in this owner | | **src/plugin-state** · `src/plugin-state/plugin-blob-store.worker.ts` | 0/0/1/0/0 | 30 | Worker implementation; keep SQL in this owner | | **src/plugin-state** · `src/plugin-state/plugin-state-store.kernel.ts` | 0/1/0/0/0 | 405 | Only plugin-state-store.journal.ts:202 calls allocation, and only plugin-state.worker.ts:173 calls that journal kernel; host facade plugin-state-store.ts:555 dispatches registerPluginStateJournalInWorker. | | **src/plugin-state** · `src/plugin-state/plugin-state.worker.ts` | 0/0/2/0/0 | 172 | Worker implementation; keep SQL in this owner | | **src/plugins** · `src/plugins/conversation-binding-state.kernel.ts` | 2/0/0/0/0 | 14 | Worker implementation; keep SQL in this owner | | **src/plugins** · `src/plugins/installed-plugin-index-store-write.ts` | 0/1/2/0/0 | 147 | Live install-record commits, direct index writes, refresh, and exact-revision rollback dispatch through plugins/state.worker.ts under the retained lifecycle lease. Source-admission publication uses that worker too. The synchronous refresh kernel has no remaining non-worker production callers. | | **src/plugins** · `src/plugins/official-external-plugin-catalog-snapshot-store.kernel.ts` | 1/1/0/0/0 | 156 | Worker implementation; keep SQL in this owner | | **src/plugins** · `src/plugins/state.worker.ts` | 0/0/4/0/0 | 100 | Worker implementation; keep SQL in this owner | | **src/projects** · `src/projects/project-registry.kernel.ts` | 6/7/0/0/0 | 43 | Worker implementation; keep SQL in this owner | | **src/projects** · `src/projects/project-registry.worker.ts` | 0/0/1/0/0 | 29 | Worker implementation; keep SQL in this owner | | **src/proxy-capture** · `src/proxy-capture/store.worker.ts` | 0/0/1/0/0 | 17 | Worker implementation; keep SQL in this owner | | **src/secrets** · `src/secrets/store/secret-store-config-ref.kernel.ts` | 1/1/1/0/0 | 47 | Worker implementation; keep SQL in this owner | | **src/secrets** · `src/secrets/store/secret-store-expiry.kernel.ts` | 3/0/1/0/0 | 39 | Worker implementation; keep SQL in this owner | | **src/secrets** · `src/secrets/store/secret-store-hidden-github.ts` | 1/0/0/0/0 | 105 | Counted expression is null DELETE only: src/state/user-github-connections.ts:260 → user-profiles-merge.ts:58 → user-profile-writes.worker.ts:325,375,432. Other value callers pass JSON strings. | | **src/secrets** · `src/secrets/store/secret-store-metadata.kernel.ts` | 1/1/0/0/0 | 65 | Worker implementation; keep SQL in this owner | | **src/secrets** · `src/secrets/store/secret-store-write.ts` | 3/1/3/0/0 | 75 | Only openclaw-state-worker-runtime.ts calls these ordinary secret mutation kernels | | **src/sessions** · `src/sessions/session-state-events.kernel.ts` | 11/5/0/0/0 | 105 | session-state-events.worker.ts and session-upstream-links.worker.ts; Watch commands and event recording execute only in session-state-events.worker.ts and subagent-registry.store.worker.ts; Seed cursors run through sessionState.record/registerWatch; periodic and restart pruning dispatch sessionState.prune; All producers await sessionState.record; the only direct production kernel callers are session-state-events.worker.ts and subagent-registry.store.worker.ts | | **src/sessions** · `src/sessions/session-state-events.read.worker.ts` | 4/3/0/0/0 | 18 | Worker implementation; keep SQL in this owner | | **src/sessions** · `src/sessions/session-state-events.worker.ts` | 5/0/6/0/0 | 37 | Worker implementation; keep SQL in this owner | | **src/sessions** · `src/sessions/session-upstream-links.kernel.ts` | 1/0/0/0/0 | 78 | Only sessionUpstream.listWatched dispatches this read; mutation kernels retain v2026.9.8 synchronous SDK callers until the next Plugin SDK major. | | **src/sessions** · `src/sessions/session-upstream-links.worker.ts` | 2/0/2/0/0 | 28 | Worker implementation; keep SQL in this owner | | **src/skills/library** · `src/skills/library/import.kernel.ts` | 4/0/0/0/0 | 41 | Worker implementation; keep SQL in this owner | | **src/skills/library** · `src/skills/library/selection-read.kernel.ts` | 1/0/0/0/0 | 56 | Manifest batch only called by openclaw-state-read.worker.ts:477; metadata batch remains host-reachable | | **src/skills/library** · `src/skills/library/service.kernel.ts` | 6/0/0/0/0 | 114 | Worker implementation; keep SQL in this owner | | **src/skills/library** · `src/skills/library/store.ts` | 3/3/1/0/0 | 77 | Library row, revision, upload, and mutation kernels run only through the shared-state reader/writer; the SDK metadata batch remains in selection-read.kernel.ts | | **src/skills/library** · `src/skills/library/store.worker.ts` | 0/0/3/0/0 | 31 | Worker implementation; keep SQL in this owner | | **src/skills/lifecycle** · `src/skills/lifecycle/upload-store-commit.ts` | 2/0/1/0/0 | 96 | Worker implementation; keep SQL in this owner | | **src/skills/lifecycle** · `src/skills/lifecycle/upload-store.kernel.ts` | 7/3/5/0/0 | 48 | Worker implementation; keep SQL in this owner | | **src/skills/lifecycle** · `src/skills/lifecycle/upload-store.sqlite.ts` | 4/5/3/0/0 | 63 | Worker implementation; keep SQL in this owner | | **src/skills/workshop** · `src/skills/workshop/changes.worker.ts` | 0/0/2/0/0 | 19 | Worker implementation; keep SQL in this owner | | **src/state** · `src/state/agent-deletion-cleanup.worker.ts` | 0/0/1/0/0 | 110 | Worker implementation; keep SQL in this owner | | **src/state** · `src/state/agent-deletion-journal-authority.worker.ts` | 0/1/0/0/0 | 12 | Worker implementation; keep SQL in this owner | | **src/state** · `src/state/agent-deletion-journal-recovery.ts` | 1/0/0/0/0 | 163 | Only agent-deletion-recovery.worker.ts and worker-only journal completion resolve holds; reconstruction and Doctor hold producers remain separate native maintenance operations | | **src/state** · `src/state/agent-deletion-journal.read.ts` | 0/1/0/0/0 | 78 | src/state/openclaw-state-read-registry.ts:65 under read worker :679; other executor src/state/openclaw-agent-execution.worker.ts:190. | | **src/state** · `src/state/agent-deletion-journal.snapshot.worker.ts` | 1/0/0/0/0 | 25 | Worker implementation; keep SQL in this owner | | **src/state** · `src/state/agent-deletion-journal.ts` | 7/1/0/0/0 | 341 | agent-deletion.worker.ts owns all production journal mutations; synchronous fixture adapters live under test-utils. Native SDK cleanup retains only live journal/lease reads around agent COMMIT | | **src/state** · `src/state/agent-deletion.worker.ts` | 4/0/0/0/0 | 290 | Worker implementation; keep SQL in this owner | | **src/state** · `src/state/agent-provenance.kernel.ts` | 2/0/0/0/0 | 24 | agentProvenance.list/readBatch/record execute through openclaw-state-worker-runtime.ts; native synchronous lifecycle guards use the joined projection in agent-lifecycle-read.kernel.ts | | **src/state** · `src/state/agent-provenance.ts` | 1/0/0/0/0 | 74 | Only completeAgentDeletionJournalInDatabase, reached from agent-deletion.worker.ts, deletes provenance; lifecycle incarnation readers retain synchronous live-authority checks | | **src/state** · `src/state/backup-run-records.kernel.ts` | 3/0/0/0/0 | 24 | Worker implementation; keep SQL in this owner | | **src/state** · `src/state/config-machine-state-write.ts` | 1/0/1/0/0 | 142 | src/state/onboarding-recommendations.ts:77 submits clear → worker registry :171 → onboarding-recommendations.kernel.ts:178. | | **src/state** · `src/state/github-personal-publication-lifecycle.ts` | 3/2/1/0/0 | 113 | Worker implementation; keep SQL in this owner | | **src/state** · `src/state/openclaw-agent-canonical-validation-receipt.ts` | 1/0/0/0/0 | 79 | src/config/sessions/session-accessor.sqlite-mutation-worker.runtime.ts:392; loaded only by archive.worker.ts:523,594. | | **src/state** · `src/state/openclaw-agent-db-registry.worker.ts` | 0/0/1/0/0 | 18 | Worker implementation; keep SQL in this owner | | **src/state** · `src/state/openclaw-agent-execution-cleanup.worker.ts` | 0/0/1/0/0 | 16 | Worker implementation; keep SQL in this owner | | **src/state** · `src/state/openclaw-agent-execution.worker.ts` | 0/0/1/1/0 | 412 | Worker implementation; keep SQL in this owner | | **src/state** · `src/state/openclaw-agent-startup-fts.ts` | 0/0/1/0/0 | 40 | Worker implementation; keep SQL in this owner | | **src/state** · `src/state/openclaw-state-worker-runtime.ts` | 0/0/4/0/0 | 181 | Worker implementation; keep SQL in this owner | | **src/state** · `src/state/openclaw-state.worker.ts` | 0/0/3/0/0 | 179 | Worker implementation; keep SQL in this owner | | **src/state** · `src/state/session-repository-workspaces.kernel.ts` | 0/5/0/0/0 | 57 | Worker implementation; keep SQL in this owner | | **src/state** · `src/state/session-repository-workspaces.worker.ts` | 0/0/1/0/0 | 75 | Worker implementation; keep SQL in this owner | | **src/state** · `src/state/user-channel-identities.worker.ts` | 0/0/1/0/0 | 72 | Worker implementation; keep SQL in this owner | | **src/state** · `src/state/user-model-accounts.ts` | 2/0/1/0/0 | 468 | Personal sign-in persistence executes only through userProfiles.modelAccount.connect in user-profiles.worker.ts. Inventory/link/unlink kernels retain T1 for deprecated v2026.9.8 Gateway SDK methods; bundled callers use the Async replacements. Shared credential/OAuth kernels and the live account pin guard also retain T1.; Only src/state/user-profiles-merge.ts:57, executed by user-profile-writes.worker.ts:325,375,432. | | **src/state** · `src/state/user-preferences.store.ts` | 9/0/0/0/0 | 38 | Preference read/write dispatch at user-preferences.worker.ts:52,74; merge/GitHub helpers only in user-profile-writes.worker.ts:325,375,432 and openclaw-state-read.worker.ts:616; private key scans serve these worker writers | | **src/state** · `src/state/user-preferences.worker.ts` | 0/0/1/0/0 | 45 | Worker implementation; keep SQL in this owner | | **src/state** · `src/state/user-profile-github-identity.ts` | 4/2/0/0/0 | 261 | Read dispatcher src/state/openclaw-state-read.worker.ts:577; mutations user-profile-writes.worker.ts:424,432 and merges :325,375. ensureEmail path user-profiles.worker.ts:61; private writeIdentity only from applyVerifiedGitHubIdentity; private selectGitHubProfileAlias only from readGitHubIdentityBinding and the read-worker cached-binding command (openclaw-state-read.worker.ts:520). | | **src/state** · `src/state/user-profile-identity.read.ts` | 5/0/0/0/0 | 67 | Registered profile writers and openclaw-state-read.worker.ts execute these readers; projects.list prepares exact aliases through user-profile-reads.ts. Released SDK identity/display fallbacks retain native reads. | | **src/state** · `src/state/user-profile-writes.worker.ts` | 8/2/0/0/0 | 87 | Worker implementation; keep SQL in this owner | | **src/state** · `src/state/user-profiles-internal.ts` | 2/2/0/0/0 | 64 | Creation/link/merge/sync calls flow through src/state/user-profiles.worker.ts:61,69,71 and user-profile-writes.worker.ts:325,350,359,375,430; identity/avatar reads dispatch only from openclaw-state-read.worker.ts:577,604,631. | | **src/state** · `src/state/user-profiles-merge.ts` | 6/0/0/0/0 | 34 | Only src/state/user-profile-writes.worker.ts:325,375,432 executes mergeUserProfiles. | | **src/state** · `src/state/user-profiles-owner.ts` | 3/0/0/0/0 | 75 | src/state/user-profiles.ts:320 invokes ensureGatewayOwnerProfileRow; sole executor user-profiles.worker.ts:78. | | **src/state** · `src/state/user-profiles.ts` | 3/1/0/0/0 | 161 | Sole executor src/state/user-profiles.worker.ts:69 → ensureProfileForTailscaleIdentity → user-profiles.ts:339,345. | | **src/state** · `src/state/user-profiles.worker.ts` | 2/0/1/0/0 | 200 | Worker implementation; keep SQL in this owner | | **src/talk** · `src/talk/client-voice-session-lookup.worker.ts` | 0/0/0/0/1 | 69 | Worker implementation; keep SQL in this owner | | **src/transcripts** · `src/transcripts/store-export.worker.ts` | 0/1/0/0/0 | 34 | Worker implementation; keep SQL in this owner | | **src/transcripts** · `src/transcripts/store-read.ts` | 0/3/0/0/0 | 487 | Ordinary reads dispatch through store-worker-read.ts; streamed library exports dispatch through store-export.worker.ts. TranscriptsStore no longer invokes a native generator; remaining host references are types and pure helpers. | | **src/transcripts** · `src/transcripts/store-sqlite-read.ts` | 5/4/0/0/0 | 32 | Worker implementation; keep SQL in this owner | | **src/transcripts** · `src/transcripts/store-sqlite-write.ts` | 3/2/0/0/0 | 63 | Worker implementation; keep SQL in this owner | | **src/transcripts** · `src/transcripts/store-sqlite.ts` | 3/5/0/0/0 | 67 | Worker implementation; keep SQL in this owner | | **src/transcripts** · `src/transcripts/store-worker-write.ts` | 0/0/1/0/0 | 38 | Worker implementation; keep SQL in this owner |